last executing test programs: 7.418797172s ago: executing program 3 (id=897): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000000dc0)=""/69, 0x45}], 0x3}}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000004c0)="9b9934b62d87201095ad30643f51db6de1aa4dc24bd8124f7e9a88c2c6c935e39a08a6c6fa5bda014592f576c26660985f609f4117", 0x35}], 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r4, 0x10, 0x3, 0xceec) 7.373583167s ago: executing program 0 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 7.268333945s ago: executing program 0 (id=899): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r9, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000001340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000001740)="eb2240c3f748fae38da58c5b037c0d5565ce497cad5496cecdc521a77b02b9feb2030b177de311c7fc5c9c678c0e3ecd03852ef93c7a64a9164eebb12ecb7c3aff950e7d6f322b2cc9a19602b0197476ab2ffccda32ba6a213881ea39528ad4aa2cf42e84129f46ef535841915452aa8c76bd1c1f0d53c4a412eb59c08893c19e87dc9c84bcc496d5bc1d4439da7e4946b9511c55c29a028a827fc48c277a44442d3aacd72950fd1a90876265e2d9f60a36298a5433336364e3c588499503ec2bb6ffde3ae9bf5cb716fd63f883ddcdb52d902d7a4df0ddca94254e98206ceee3056db9d1fd187ae95e14c692649e70f2ac5fb362b1ba66a60a5f810ffa75a74a33661fe5cad65e02706a8aeb924a6e4899a90cf59430de9d84e6d23a2c04880c6ed3c57a4856ca51f921d67fa2f51b7643883f4d3f7c305334f3c8650703d8bd1b59e30c312d7cfe647766f41577dd0a16de431087bc8ca0555b80645a92066ba93889090f6f651c4a6bb1e8751ba4fdfded62c3ad3d10b7b9349650256025d04ab7f52c9de2439c09405466b4df67f6b17226434520ea8c84740ebbde0251c5e03ab8cab3e032ee33a39ec6514d314e4ff6755fcba6f3e14aecb2877ec662dfa05028d302f0e22159802b7bfda3d40e5bbabdbde40353b9a4438c84ec2663cd9163218b3f477e56ac1e2e16e98f8e81bbe8b0fef409e80686b4ef20b78c48d65c31f512e4acc22b5e09f9befc1d74c6ae70d08c8d4453a936b15e92169137128b8f4c0adbd9b1b2321bb0a4aab9339a5620103ed3c6d506d495c1cb75723c596a7fa2817da8baffc493460b9b0b891ff689123c16d4a6aec5d96d779435668f2e230db79025f567092b0bc8353fe8634040f35e427c5c316e64d3721404f6c53ebf554104c9bcd6718fad673402306e332a5bbcd2d883b87ab453312e888f515799591975f7fd74a5e4af0053156d04b5ad04eb752e117b701dece15135f75e327e8a87ff029647398c7e06ea1952d99cbc6f3636d795050cb350a40fbf425bdae83f7a727ae91fd6e88d5703256d1d1eadb8e42541c1f0d660aa45912dc3bbcc68bfea5ff124788df92ad1fabd867effe68628465811a5f0d6538ec2d8493bb67cbbba4bea0b7aa6aaa9e26fd45664a2b90999fbb99455d780a3e111999c38f800021d575eb0332b9b382659e674e8a91de2543bd44eb55f55a330713245cc86067edd0274d7271950b4ffb1f28e00383b2891e87ec38a4ddb6537cccd3c473715bb4ba51cce556344d476773f7b3a5d6dfc84bd451ce1ca49f4a46b0ccf5bb816368cda4fc6e82fe1b868a8fb82a62f9ab9d0d5f2a852c02658f9a25981163d3ea6145aea3a5bd73206520cf623e53ba54237c50fba5f7bdfec93770ff99d9181e90d188a639e45612a058377a603ddf13b849b5d076d83e5a45b6964fb4d57d7687cc4682ff5a465270b82c27c13b231b88b8143d26f55408099a86d9d36df28b9992938897b361c42413296d6a4f6742a9fbd9f93afbe333f8608d391e7c7c43438d17a103063f5a79d60901b5821b90f06174f6536f81abbffa2a2ccc12a9e20d7010e0faccf49049f5df608f43d5692fc21661e1dd867e2db80f915198f7436047baa2105960e800fe0f057827757549f028a2392eb250049f8b388d5b9ffff7a2d7844e17510559fbff42cb5d4ca424d5180fe9cb18d594cae1f8ab0d93d425a06cb69b18ddbee9e298accd157309cf880b72ba8b0baa42a66f3cb62a490e646f181d63bdf293710a5a77e3cc7ed3ecbe5ac32ee52a892488e12d8fd9d271aa18c98d1ad5222f5f770d669a0fa5cc2edaad5d39013815688318a10be823cc9a78e178b1bfbc3576ab2fb4729f33e5ef060ce3d862e86c051f074f2b18d25ee9d1aa6af6a984b9a42bb65f0b08580b8597a936ae6a10e3b38bb344be7b0e1935ef73bb7f33012ecb6ad3921ccb7b0c6673f12b4007312c7c777a731cf60e900ded63cd0c4b8825a52bfd75db7c2990e31be0ffff88649efa1998d394f828974abfdc2cd4f3e134b6a206d9c31f3ac442b4e7c2d94371850d6c205b0b2bc43a754b228a807ed768d1b4f2c1fb2ebf1df3ac8ca45a78ce303bb5b55d203e7127c32155f0c8eed85311b59e23e18d09115a38c0e63a075d3dd921d74f32642fe6a190bbc8462d00b014b4410b9088856f7e0a424eba1d3ab1c9850f1eca6efa0611", 0x624}, {&(0x7f0000002740)}], 0x4}}, {{&(0x7f0000002940)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x3, 0x0) 6.487460422s ago: executing program 3 (id=904): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = memfd_create(0x0, 0x5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1f7}}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@keep_last_dots}, {@errors_remount}, {@errors_remount}, {@discard}, {@utf8}, {@namecase}]}, 0x1, 0x150a, &(0x7f0000002c80)="$eJzs3Au8TtXWMPAx5pyLTdKT5D7HHIsnuUySJJeEXJIkSZLcEpIkSUJyyy0JScg95B6SW0ju9/s9SY4kSUJCkvn9VOd1ztd7vvrec77Pe949/r/fYo69njGesZ6x937WWr+99zftBlaqU7l8LWaGfwr++l9XAEgBgD4AcB0ARABQLFOxTJf3p9PY9Z97EvGv9fDUq92BuJpk/qmbzD91k/mnbjL/1E3mn7rJ/FM3mX/qJvMXIjXbOi379bKl3u3P3/93/+fdcv//35C8//+P9ae+0mT+qZvMP3WT+aduMv/UTeafusn8UzeZf+om8xciNbva95//Dba/vlRXu48/2KL/Ut7V/ewTQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJFanA9XGAD46/pq9yWEEEIIIYQQQoh/nZD2ancghBBCCCGEEEKI//cQwGgwEEEaSAspkA7SwzWQAa6FjHAdJOB6yAQ3QGa4EbJAVsgG2SEH5IRcYIHAAUMMuSEPJOEmyAs3Qz7IDwWgIHgoBIXhFigCt0JRuA2KweyFAHdACSgJpaA03All4C4oC+WgPNwNFaAiVILKcA9UgXuhKtwH1eB+qA4PQA14EGrCQ1ALHoba8AjUgUehLjwG9aA+NICG0Oi/lP8SdIKXoTN0ga7QDbrDK9ADekIv6A194FXoC69BP3gd+sMAGAhvwCB4EwbDWzAEhsIweBuGwwgYCaNgNIyBsfAOjIPxMAHehYkwCSbDFJgK02A6vAczYCbMgvdhNnwAc2AuzIP5sAA+hIWwCBbDR7AEPoalsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu2A37Cm3Fz6BffAp7IfP4AB8/n+Zfw7+Pr89AgIqVGjQYBpMgymYgukxPWbADJgRM2ICE5gJM2FmzIxZMAtmw2yYA3NgLsyFhISMjLkxNyYxiXkxL+bDfFgAC6BHj4WxMBbBW7EoFsViWAyLY3EsgSWxJJbG0lgGy2BZLIvl75gLgBWwElbCe/AevBerYlWshtWwOlbHGlgDa2JNrIW1sDbWxjpYB+tiXayH9bABNsBG2AgbY2Nsgk2wGTbD5tgcW2ALbIktsRW2wtbYGttgG2yLbbEdtsP22AE74Ev4Er6ML2MXrKC6YXfsjj2wB/bC3tgbX8W++Bq+hq9jfxyAA/ENfAPfxMF4FofgUByGw7CMGoEjcRSyGoNjcSyOw3E4ASfgRJyEk3AKTsVpOB2n4wyciTPxfZyNH+AHOBfn4nxcgAtwIS7CxbgYl+A5XIrLcDmuwJW4ClfiGlyLa3A9bsD1uAk34RbcgttwG+7AHbgLd+Ee3IOf4Cf4KX6K/fEAHsCDeBAP4SE8jIfxCB7Bo3h02zUAeByP4wk8gSfxFJ7GU3gGz+BZPIfn8TxewAt4EV/I8VXtPfnX9Qd1mVFGpVFpVIpKUelVepVBZVAZVUaVUAmVSWVSmVVmlUVlUdlUNpVD5VC5VC5FihSrWOVWuVVSJVVelVflU/lUAVVAeeVVYVVYFVFFVFFVVBVTt6vi6g5VQpVUTX1pVVqVUc18WVVOlVflVQVVUVVSlVVlVUVVUVVVVVVNVVPVVXVVQz2oaqpu2AsfVpcnU0cNwLpqINZT9VUD1VC9iY+rxmowNlFNVTP1pBqKQ7CFauxbqmdUKzUSW6vn1Ch8XrVVY7CdelG1Vx1UR/WS6qSa+M6qi5qI3VR3NQV7qJ6ql+qtZmBFdXlildTrqr8aoAaqN9R8fFMNVm+pIWqoGqbeVsPVCDVSjVKj1Rg1Vr2jxqnxaoJ6V01Uk9RkNUVNVdPUdPWemqFmqlnqfTVbfaDmqLlqnpqvFqgP1UK1SC1WH6kl6mO1VC1Ty9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1V/UIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ1USfVKXVafa/OqB/UWXVOnVc/qgvqJ3VR/awuqaBAo1Zaa6MjnUan1Sk6nU6vr9EZ9LU6o75OJ/T1OpO+QWfWN+osOqvOprPrHDqnzqWtJu0061jn1nl0Ut+k8+qbdT6dXxfQBbXXhXRhfYsuom/VRfVtupi+XRfXd+gSuqQupUvrO3UZfZcuq8vp8vpuXUFX1JV0ZX2PrqLv1VX1fbqavl9X1w/oGvpBXVM/pGvph3Vt/Yiuox/VdfVjup6urxvohrqRflw31k/oJrqpbqaf1M31U7qFflq31M/oVvpZ3Vo/p9vo53Vb/YJup1/U7XUH3VH/rC/poDvrLrqr7qa761d0D91T99K9dR/9qu6rX9P99Ou6vx6gB+o39CD9ph6s39JD9FA9TL+th+sReqQepUfrMXqsfkeP0+P1BP2unqgn6cl6ip6qp+lev1Wa9Sfyx/8n+f1+efYteqveprfrHXqn3qV36z16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6BP6pD6lf9Tf6zP6B31Wn9Pn9I/6gr6gL/72GoBBo4w2xkQmjUlrUkw6k95cYzKYa01Gc51JmOtNJnODyWxuNFlMVpPNZDc5TE6Ty1hDxhk2sclt8pikucnkNTebfCa/KWAKGm8KmcLmln86/x/0t2LyrycvppFpZBqbxqaJaWKamWamuWluWpgWpqVpaVqZVqa1aW3amDamrWlr2pl2pr1pbzqajqaT6WQ6I5iupqvpbl4xPUxP08v0Nn3Mq6av6Wv6mX6mv+lvBpqBZpAZZAabwWaIGWIMAAw3w81IM9KMNqPNWDPWjDPjzAQzwUw0E81kM9lMNVPNdDPdzDAzzCwzy8w2s80cM8fMM/PMArPALDQLzWKz2CwxS8xSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMkvNVrPVbDfbzU6z0+w2u81es9fsM/vMfrPfHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8xJc9KcNqfNGXPGnDVnzXlz3lwwF8xFc9FcMpcun/ZFKlKRiUyUJkoTpUQpUfoofZQhyhBljDJGiSgRZYoyRZmjG6MsUdYoW5Q9yhHljHJFNqLIRRzFUe4oT5SMboryRjdH+aL8UYGoYOSjQlHh6JaoSHRrVDS6LSoW3R4Vj+6ISkQlo1JR6ejOqEx0V1Q2KheVj+6OKkQVo0pR5eieqEp0b1Q1ui+qFt0fVY8eiGpED0Y1o4eiWtHDUe3okahO9GhUN3osqhfVjxpEDaNG/9L6IZzN+oTvbLvYtNDNdrev2B62p+1le9s+9lXb175m+9nXbX87wA60b9hB9k072L5lh9ihdph92w63I+xIO8qOtmPsWPuOHWfH2wn2XTvRTrKT7RQ71U6z0+17doadaWfZ9+1s+4GdY+faeXa+XWA/tAvtIrvYfmSX2I/tUrvMLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63O+xOu8vutnvsXvuJ3Wc/tfvtZ/aA/dwetCm/nd9/aY/Yr+xR+7U9Zr+xx+239oT9zp60p+xp+709Y3+wZ+05e97+aC/Yn+xF+7O9ZMPlk/vLb+9kyFAaSkMplELpKT1loAyUkTJSghKUiTJRZspMWSgLZaNslINyUC7KRZcxMeWm3JSkJOWlvJSP8lEBKkCePBWmwlSEilBRKkrFqBgVp+JUgkpQKSpFd9KddBfdReWoHN1Nd1NFqkiVqTJVoSpUlapSNapG1ak61aAaVJNqUi2qRbWpNtWhOlSX6lI9qkcNqAE1okbUmBpTE2pCzagZNafm1IJaUEtqSa2oFbWm1tSG2lBbakvtqB21p/bUkTpSJ+pEnakzdaWu1J26Uw/qQb2oF/WhPtSX+lI/6kf9qT8NpIE0iAbRYBpMQ2goDaO3aTiNoJE0ikbTGBpLY2kcjaMJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2k7baedtJN2027aS3tpH+2j/bSfDtABOkgH6RAdosN0mI7QETpKR+kYHaPjdJxO0Ak6SSfpNJ2mM3SGztJZOk/n6QL9RBfpZ7pEgVJcOpfeXeMyuGtdRned+9/jbC67y+FyulzOuiwu69/F5JzL5/K7Aq6g866QK+xu+V1cwpV0pVxpd6cr4+5yZX8XV1m789cfRHf3u8ruHlfF3euquvtcNXe/q+4ecDXco66me8zVcvVdbdfQ1XGPurruMVfP1XcNXEPX3D3lWrinXUv3jGvlnv1dvNAtcmvdOrfebXD73KfuvPvRHXPfuAvuJ9fZdXF93Kuur3vN9XOvu/5uwO/iYe5tN9yNcCPdKDfajfldPNlNcVPdNDfdvedmuJm/ixe4D91st9jNcXPdPDf/l/hyT4vdR26J+9gtdcvccrfCrXSr3Gq35j96XeE2uc1ui9vrPnHb3Q630+1yu92eX+LLx7HffeYOuM/dUfe1O+S+cIfdcXfEffVLfPn4jrtv3Qn3nTvpTrnT7nt3xv3gzrpzvxz/5WP/3v3sLrnggJEVazYccRpOyymcjtPzNZyBr+WMfB0n+HrOxDdwZr6Rs3BWzsbZOQfn5Fxsmdgxc8y5OQ8n+SbOyzdzPs7PBbggey7EhfkWLsK3clG+jYvx7Vyc7+ASXJJLcWm+k8vwXVyWy3F5vpsrcEWuxJX5Hq7C93JVvo+r8f1cnR/gGvwg1+SHuBY/zLX5Ea7Dj3JdfozrcX1uwA25ET/OjfkJbsJNuRk/yc35KW7BT3NLfoZb8bPcmp/jNvw8t+UXuB2/yO25A3fkl7gTv8yduQt35W7cnV/hHtyTe3Fv7sOvcl9+jfvx69yfB/BAfoMH8Zs8mN/iITyUh/HbPJxH8EgexaN5DI/ld3gcj+cJ/C5P5Ek8mafwVJ7G0/k9nsEzeRa/z7P5A57Dc3kez+cF/CEv5EW8mD/iJfwxL+VlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nXcw8i7ezXt4L3/C+/hT3s+f8QH+nA/yX/gQf8GH+Us+wl/xUf6aj/E3fJy/5RP8HZ/kU3yav+cz/AOf5XN8nn/kC/wTX+Sf+RIHhhhjFevYxFGcJk4bp8Tp4vTxNXGG+No4Y3xdnIivjzPFN8SZ4xvjLHHWOFucPc4R54xzxTam2MUcx3HuOE+cjG+K88Y3x/ni/HGBuGDs40Jx4fiWuEh8a1w0vi0uFt8eF4/viEvEJeNH7y8d3xmXie+Ky8bl4vLx3XGFuGJcKa4c3xNXie+Nq8b3xdXi++Oi8QNxjfjBuGb8UFwrfjiuHT8S14kfjevGj8X14vpxg7hh3Ch+PG4cPxE3iZvGzeIn4+bxU3GL+Om4ZfxM3Cp+9g/3d427xd3jV+JX4hDu0/OS85MLkh8mFyYXJRcnP0ouSX6cXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNyc3JIMoXJa8OiV1974yKfxaX2KT+fT+2t8Bn+tz+iv8wl/vc/kb/CZ/Y0+i8/qs/nsPofP6XN568k7zz72uX0en/Q3+bz+Zp/P5/cFfEHvfSFf2Df0jXwj39g/4Zv4pr6Zf9I/6Z/yT/mn/dP+Gd/KP+tb++d8G/+8b+tf8C/4F31738F39C/5Tv5l39l38V19V9/dd/c9fA/fy/fyfXwf39f39f18P9/f9/cD/UA/yA/yg/1gP8QP8cP8MD/cD/cj/Ug/2o/2Y/1YP86P8xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD8732w/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv9dr/T7/S7/W6/1+/1+/w+v9/v9wf8AX/QHzwf/CF/2H/pj/iv/FH/tT/mv/HH/bf+hP/On/Sn/Gn/vT/jf/Bn/Tl/3v/oL/if/EX/s7/kgx+beCcxLjE+MSHxbmJiYlJicmJKYmpiWmJ64r3EjMTMxKzE+4nZiQ8ScxJzE/MS8xMLEh8mFiYWJRYnPkosSXycWJpYllieWJFYmViVCCHn9jjkDnlCMtwU8oabQ76QPxQIBYMPhULhcEsoEm4NRcNtoVi4PRQPd4QSoWQoFR4L9UL90CA0DI3C46FxeCI0CU1Ds/BkaB6eCi3C06FleCa0Cs+G1uG50CY8H9qGF0K78GJoHzqEjuGl0Cm8HDoHHbqGbqF7eCX0CD1Dr9A79Amvhr7htdAvvB76hwFhYHgjDApvhsHhrTAkDA3DwttheBgRRoZRYXQYE8aGd8K4MD5MCO+GiWFSmBymhKlhWpge3gszwswwK7wfZocPwpwwN8wL88OC8GFYGBaFxeGjsCR8HJaGZWF5WBEgZVVYHdaEtWFdWB82hI1hU9gctoStYVvYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+Eg6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4ZL8zpoQQgghxJ8y/g/2d/u7SP3Hv+q3j3QHgGt3ZD/yt4/SALAxy6/rnipH8wQAPNOl3cN/3SpU6Nq162+PXaohyjMXABJX8tPAlXgZNIOnoCU0hSL/aX89VYcL/Af1k7cDpP+bnBS4El+pf+s/qD9i9h/WnwuQL8+VnHRwJb5Sv+jvake/1M/a+A/qp/tiLECTv8nLAFfiK/ULwxPwLLT8u0cKIYQQQgghhBC/6qlKtfmj69vL1+c5zJWctHAl/qPrcyGEEEIIIYQQQlx9z3fo+PTjLVs2bfMPFuX+8S5ZpJZFmv8ebfzbLwD+W7Tx5xZX+zuTEEIIIYQQ4l/tykn/1e5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIvf5//Dmxq32MQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxNX2vwIAAP//rKwyVA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 6.428023196s ago: executing program 0 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3810744, &(0x7f00000001c0)={[{}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@grpquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8000000000000000}}, {@acl}]}, 0xff, 0x46b, &(0x7f0000000800)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) clock_gettime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x17d, &(0x7f00000004c0)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28040d3, 0x0, 0xbc, 0x0, &(0x7f0000000100)) 6.256570901s ago: executing program 3 (id=907): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4", 0x4}], 0x1}}], 0x1, 0x0) 6.155290009s ago: executing program 2 (id=908): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{}, {@noblock_validity}, {@resuid}, {@nobh}, {@lazytime}, {@usrquota}, {@mblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000340)='./file0\x00', 0x0, r1) 6.108047733s ago: executing program 2 (id=909): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x8001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) fallocate(r0, 0x8, 0x0, 0x1000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfffffffffffff000, 0x5}) 5.956070306s ago: executing program 2 (id=910): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000001c0)={[{@usrquota}, {@journal_ioprio}]}, 0x1, 0x515, &(0x7f0000001c40)="$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") openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) r8 = dup(r6) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) 5.720214506s ago: executing program 1 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 5.710930637s ago: executing program 1 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000240)={0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYRES64=r5, @ANYRES32, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x400008c5) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 5.542890251s ago: executing program 0 (id=912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bsdgroups}, {@sysvgroups}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.429311771s ago: executing program 3 (id=913): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$eJzs3UFvU8kdAPD/e0lICIGElkNbtYVSKK0QdmIgQpzopVWFkKqinnqANDFRFDuOYoeSlEP4Bj1UKlJP7UfooVIPlTj13lt72wt7WIndRbsiK+3BKz8/hyQkEJZsjOLfTxq9mXnm/WdsvRkzSd4E0LPORMRaRByJiLsRMZrXJ3mKG+3Uet2L5w+n158/nE6i2bz9SZKdb9XFpn/Tciy/5lBE/OaXEb9PXo1bX1mdn6pUykt5udioLhbrK6uX5qpTs+XZ8kKpNDkxOX7t8tXSvvX1dPUfz34xd/O3//7XD57+d+1nf2w1ayQ/t7kfHQP7EDPJrzSyqa4/Im7uw7XfB315f450uyF8LWlEfCsizmb3/2j0ZZ8mAHCYNZuj0RzdXAYADrs0WwNL0kK+FjASaVootNfwTsVwWqnVGxfv1ZYXZtprZWMxkN6bq5TH87XCsRhIWuWJLP+yXNpWvhwRJyPiz4NHs3JhulaZ6eYXHwDoYce2zf+fD7bnfwDgkBvqdgMAgANn/geA3mP+B4DeY/4HgN5j/geA3mP+B4DeY/4HgJ7y61u3Wqm5nj//eub+yvJ87f6lmXJ9vlBdni5M15YWC7O12mz2zJ7qm65XqdUWJ67E8oNio1xvFOsrq3eqteWFxp3sud53ylueqb0fD9gGAN7aydNP/p9ExNr1o1mKTXs5mJ7hcEu73QCga/q63QCga+z2Bb3L//GBHbbo3WLXXxF6vP9tAQ7Ghe9a/4deZf0fepf1f+hd1v+hdzWbiT3/AaDHWOMH/PwfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3t5IlpK0kO8FPhJpWihEHI+IsRhI7s1VyuMRcSIi/jc4MNgqT3S70QDAO0o/SvL9vy6MnhvZfvZI8sVgdoyIP/z19l8eTDUaSxOt+k836huP8/pSpwYAeJ905unOPN7x4vnD6U46yPY8+3l7c9FW3PU8tc/0R392HIqBiBj+LMnLba3vK337EH/tUUR8Z6f+J9nayFi+8+n2+K3Yxw80frolfpqdax9b78W396Et0GuetMafGzvdf2mcyY473/9D2Qj17jrj3/or41+6Mf717TL+ndlrjCv/+dWu5x5FfK9/p/jJRvxkl/jn9hj/g+//8OzWmvN/ajbbuebfIi7EzvE3xyo2qovF+srqpbnq1Gx5trxQKk1OTI5fu3y1VMzWqIudlepXfXz94onX9X94c/y+2Ig/9Ib+n99j///+5d3f/eg18X/6450//1Ovid+aE3+yx/hTw//cdfvuVvyZXd7/N33+F/cY/+mHqzN7fCkAcADqK6vzU5VKeUlGRkZmI9PtkQn4pr286bvdEgAAAAAAAAAAAAAAYDcH8edE3e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh9dXAQAA//8ymNqa") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000000dc0)=""/69, 0x45}], 0x3}}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000004c0)="9b9934b62d87201095ad30643f51db6de1aa4dc24bd8124f7e9a88c2c6c935e39a08a6c6fa5bda014592f576c26660985f609f4117", 0x35}], 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r4, 0x10, 0x3, 0xceec) 5.07657747s ago: executing program 1 (id=914): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000240)={0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYRES64=r5, @ANYRES32, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x400008c5) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 4.982169808s ago: executing program 2 (id=915): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r9, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000001340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000001740)="eb2240c3f748fae38da58c5b037c0d5565ce497cad5496cecdc521a77b02b9feb2030b177de311c7fc5c9c678c0e3ecd03852ef93c7a64a9164eebb12ecb7c3aff950e7d6f322b2cc9a19602b0197476ab2ffccda32ba6a213881ea39528ad4aa2cf42e84129f46ef535841915452aa8c76bd1c1f0d53c4a412eb59c08893c19e87dc9c84bcc496d5bc1d4439da7e4946b9511c55c29a028a827fc48c277a44442d3aacd72950fd1a90876265e2d9f60a36298a5433336364e3c588499503ec2bb6ffde3ae9bf5cb716fd63f883ddcdb52d902d7a4df0ddca94254e98206ceee3056db9d1fd187ae95e14c692649e70f2ac5fb362b1ba66a60a5f810ffa75a74a33661fe5cad65e02706a8aeb924a6e4899a90cf59430de9d84e6d23a2c04880c6ed3c57a4856ca51f921d67fa2f51b7643883f4d3f7c305334f3c8650703d8bd1b59e30c312d7cfe647766f41577dd0a16de431087bc8ca0555b80645a92066ba93889090f6f651c4a6bb1e8751ba4fdfded62c3ad3d10b7b9349650256025d04ab7f52c9de2439c09405466b4df67f6b17226434520ea8c84740ebbde0251c5e03ab8cab3e032ee33a39ec6514d314e4ff6755fcba6f3e14aecb2877ec662dfa05028d302f0e22159802b7bfda3d40e5bbabdbde40353b9a4438c84ec2663cd9163218b3f477e56ac1e2e16e98f8e81bbe8b0fef409e80686b4ef20b78c48d65c31f512e4acc22b5e09f9befc1d74c6ae70d08c8d4453a936b15e92169137128b8f4c0adbd9b1b2321bb0a4aab9339a5620103ed3c6d506d495c1cb75723c596a7fa2817da8baffc493460b9b0b891ff689123c16d4a6aec5d96d779435668f2e230db79025f567092b0bc8353fe8634040f35e427c5c316e64d3721404f6c53ebf554104c9bcd6718fad673402306e332a5bbcd2d883b87ab453312e888f515799591975f7fd74a5e4af0053156d04b5ad04eb752e117b701dece15135f75e327e8a87ff029647398c7e06ea1952d99cbc6f3636d795050cb350a40fbf425bdae83f7a727ae91fd6e88d5703256d1d1eadb8e42541c1f0d660aa45912dc3bbcc68bfea5ff124788df92ad1fabd867effe68628465811a5f0d6538ec2d8493bb67cbbba4bea0b7aa6aaa9e26fd45664a2b90999fbb99455d780a3e111999c38f800021d575eb0332b9b382659e674e8a91de2543bd44eb55f55a330713245cc86067edd0274d7271950b4ffb1f28e00383b2891e87ec38a4ddb6537cccd3c473715bb4ba51cce556344d476773f7b3a5d6dfc84bd451ce1ca49f4a46b0ccf5bb816368cda4fc6e82fe1b868a8fb82a62f9ab9d0d5f2a852c02658f9a25981163d3ea6145aea3a5bd73206520cf623e53ba54237c50fba5f7bdfec93770ff99d9181e90d188a639e45612a058377a603ddf13b849b5d076d83e5a45b6964fb4d57d7687cc4682ff5a465270b82c27c13b231b88b8143d26f55408099a86d9d36df28b9992938897b361c42413296d6a4f6742a9fbd9f93afbe333f8608d391e7c7c43438d17a103063f5a79d60901b5821b90f06174f6536f81abbffa2a2ccc12a9e20d7010e0faccf49049f5df608f43d5692fc21661e1dd867e2db80f915198f7436047baa2105960e800fe0f057827757549f028a2392eb250049f8b388d5b9ffff7a2d7844e17510559fbff42cb5d4ca424d5180fe9cb18d594cae1f8ab0d93d425a06cb69b18ddbee9e298accd157309cf880b72ba8b0baa42a66f3cb62a490e646f181d63bdf293710a5a77e3cc7ed3ecbe5ac32ee52a892488e12d8fd9d271aa18c98d1ad5222f5f770d669a0fa5cc2edaad5d39013815688318a10be823cc9a78e178b1bfbc3576ab2fb4729f33e5ef060ce3d862e86c051f074f2b18d25ee9d1aa6af6a984b9a42bb65f0b08580b8597a936ae6a10e3b38bb344be7b0e1935ef73bb7f33012ecb6ad3921ccb7b0c6673f12b4007312c7c777a731cf60e900ded63cd0c4b8825a52bfd75db7c2990e31be0ffff88649efa1998d394f828974abfdc2cd4f3e134b6a206d9c31f3ac442b4e7c2d94371850d6c205b0b2bc43a754b228a807ed768d1b4f2c1fb2ebf1df3ac8ca45a78ce303bb5b55d203e7127c32155f0c8eed85311b59e23e18d09115a38c0e63a075d3dd921d74f32642fe6a190bbc8462d00b014b4410b9088856f7e0a424eba1d3ab1c9850f1eca6efa0611", 0x624}, {&(0x7f0000002740)}], 0x4}}, {{&(0x7f0000002940)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x3, 0x0) 3.193986549s ago: executing program 0 (id=917): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0}) 3.152596193s ago: executing program 2 (id=918): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000002a80)="3aa7f7425af62e", 0x7}], 0x1}}], 0x1, 0x40080) splice(r1, 0x0, r0, 0x0, 0x800000000000043, 0x0) 3.112625356s ago: executing program 3 (id=919): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xd, 0x4) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000001780)=""/98, 0x62}, {0x0}], 0x2) 3.078534619s ago: executing program 1 (id=920): connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0001000000000040f20436120000000000010902240001000000000904000001030000000921fcff00012205000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="1300630000000500a1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.077573189s ago: executing program 0 (id=921): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0xca8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.264130608s ago: executing program 3 (id=923): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f020000"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xc018480d, &(0x7f0000000000)={0x2, 0x200, 0x4, 0x5, 0x0, 0x2}) 2.051342766s ago: executing program 4 (id=924): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000240)={0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYRES64=r5, @ANYRES32, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x400008c5) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.963278884s ago: executing program 4 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 1.892538909s ago: executing program 4 (id=926): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000001c0)={[{@usrquota}, {@journal_ioprio}]}, 0x1, 0x515, &(0x7f0000001c40)="$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") openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) r8 = dup(r6) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) 1.077784908s ago: executing program 4 (id=927): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) memfd_create(0x0, 0x0) open(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810803, &(0x7f0000000140)=ANY=[], 0x4, 0x223, &(0x7f0000000b40)="$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") 972.405427ms ago: executing program 1 (id=928): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r9, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000001340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000001740)="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", 0x830}], 0x3}}, {{&(0x7f0000002940)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x3, 0x0) 922.449651ms ago: executing program 4 (id=929): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000000dc0)=""/69, 0x45}], 0x3}}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000004c0)="9b9934b62d87201095ad30643f51db6de1aa4dc24bd8124f7e9a88c2c6c935e39a08a6c6fa5bda014592f576c26660985f609f4117", 0x35}], 0x1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r4, 0x10, 0x3, 0xceec) 91.728151ms ago: executing program 1 (id=930): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000240)={0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYRES64=r5, @ANYRES32, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x400008c5) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 91.536572ms ago: executing program 2 (id=931): creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvTLf8VFoRf4AkVtHY+KOlBZSDHjSaeNBEowc81rYQZKGG1kQI0WIMHg2Jd+PRxL/Akyejnky8eNC7ISFKTAAvrpndmba77lT6cxf380kW3tt5M+99++btvr632wB61lD2TxJxR0T8EhEDjWxzgaHGfzeuXZi8ee3CZBK12hu/J/Vy169dmCyKFuftzDPDaUT6cZJX0mz23PlTE9Xq9Nk8Pzp3+t3R2XPnnzp5euLE9InpM+NHjx4+NPbM0+NHms47sso4s/iu7/tgZv/el9+6/Orksctvf/9V1t40P740jvUylAX+R62u9dij611Zh/1dW4wzqXS6NdyqvojIuqu/Pv4Hoi8WO28gXvqoo40DNlT2mr21/PB8DfgfS6LTLQA6o3ijz37/zR/9mzT16ApXn2/8ApTFfiN/NI5UFtYGNvIHMhQRx+b/+jx7RMs6RK3NugEAwFp9k81/nmya/+XzjzTuXVJuV743NBgRd0XE7oi4OyL2RMQ9EfWy90XE/Susv3Vr6N/7MOmVVQV2i7L537P53lbz/K+Y/cVgX567sx5/f3L8ZHX6YP4zGY7+rVl+rN3Fi0u8+NOnZfUvnf9lj6z+Yi6YX+RKpWWBbmpibmK9JqVXL0bsq7SLP1nYCUgiYm9E7FvZpXcViZOPf7m/rNB/x7+Mddhnqn0R8Vij/+ejJf5Csvz+5Oi2qE4fHG3cFX1t6vjhx0uvldW/pvjXQdb/O5rv/5YSA38mS/drZ1dex6VfPyndW62s8v7fkrxZ39Pdkj/3/sTc3NmxiC3JK/V80/Pji+cW+aJ8Fv/wgfbjf3d+Thb/AxGxP+LnYtg9mPfdQxHxcEQcWCb+71545J2yY93Q/1NtX/8W7v/B5v5feaLv1Ldfl9XfGn+S5xdLZP1/uJ4azp+pv/7ltpdct7w52/ISq72bAQAA4PaT1j8bn6QjC+k0HRlpfIZ/T+xIqzOzc08cn3nvzFTjM/SD0Z8W658DS9ZDx5L5/IqN/Hi+VlwcP5SvG3/Wtz1Jojo9MjlTnepw7NDrdpaM/8xv7RazI+K5TW0hsKF8Xwt6V+v4TzvUDmDzef+H3mX8Q+8y/qF3FeP/9SXPfdhSpmQvALjNef+H3mX8Q+9aGP8XO9sOYPN5/4ee1O5L8sXfOFjDV/7XlKgs8+39Lk0Uq6Pd0p5TSURsbBWRdkekpYnI/4hFt7Rn5YmbtVWeXllmdN9qojOvRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvtnwAAAP//aP7lHQ==") write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 0s ago: executing program 4 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) kernel console output (not intermixed with test programs): loop3: detected capacity change from 0 to 1024 [ 118.622018][ T2885] EXT4-fs: Ignoring removed orlov option [ 118.628723][ T2885] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.888654][ T2888] device pim6reg1 entered promiscuous mode [ 119.062075][ T313] petalynx 0003:18B1:0037.001A: collection stack underflow [ 119.157935][ T313] petalynx 0003:18B1:0037.001A: item 0 1 0 12 parsing failed [ 119.169305][ T313] petalynx 0003:18B1:0037.001A: parse failed [ 119.175300][ T313] petalynx: probe of 0003:18B1:0037.001A failed with error -22 [ 119.286871][ T313] usb 3-1: USB disconnect, device number 12 [ 119.403962][ T2231] samsung 0003:0419:0600.001B: item fetching failed at offset 4/5 [ 119.412013][ T2231] samsung 0003:0419:0600.001B: parse failed [ 119.418611][ T2231] samsung: probe of 0003:0419:0600.001B failed with error -22 [ 119.461217][ T2894] loop4: detected capacity change from 0 to 1024 [ 119.488421][ T2897] loop3: detected capacity change from 0 to 128 [ 119.496855][ T2894] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2740: inode #2: comm syz.4.709: corrupted in-inode xattr [ 119.509574][ T2894] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #2: comm syz.4.709: corrupted in-inode xattr [ 119.526659][ T2897] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 119.565811][ T2897] syz.3.710 (pid 2897) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 119.581225][ T2231] usb 2-1: USB disconnect, device number 11 [ 119.606884][ T2908] loop3: detected capacity change from 0 to 1024 [ 119.613524][ T2908] EXT4-fs: Ignoring removed orlov option [ 119.619705][ T2908] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.837472][ T2698] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.947466][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.986441][ T2914] loop2: detected capacity change from 0 to 1024 [ 119.993409][ T2914] EXT4-fs: Ignoring removed orlov option [ 119.999623][ T2914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 120.245604][ T2698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.256990][ T2698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.267130][ T2698] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 120.276094][ T2698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.293729][ T2925] loop1: detected capacity change from 0 to 128 [ 120.294738][ T2698] usb 1-1: config 0 descriptor?? [ 120.303778][ T2925] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 120.352702][ T2928] loop1: detected capacity change from 0 to 256 [ 120.383644][ T2932] loop1: detected capacity change from 0 to 512 [ 120.390374][ T2932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.401076][ T2932] EXT4-fs (loop1): 1 truncate cleaned up [ 120.447484][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.458486][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.468338][ T19] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 120.477565][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.494516][ T19] usb 5-1: config 0 descriptor?? [ 120.500474][ T2935] loop3: detected capacity change from 0 to 512 [ 120.581311][ T2937] device pim6reg1 entered promiscuous mode [ 120.604069][ T2902] syz.0.713[2902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.604355][ T2902] syz.0.713[2902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.646211][ T2935] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038 (0x7fffffff) [ 120.878080][ T2698] belkin 0003:1020:0006.001C: report_id 0 is invalid [ 120.884600][ T2698] belkin 0003:1020:0006.001C: item 0 0 1 8 parsing failed [ 120.891916][ T2698] belkin 0003:1020:0006.001C: parse failed [ 120.897555][ T2698] belkin: probe of 0003:1020:0006.001C failed with error -22 [ 121.127430][ T2697] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.159268][ T2698] usb 1-1: USB disconnect, device number 9 [ 121.363876][ T2951] loop3: detected capacity change from 0 to 1024 [ 121.369045][ T19] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 121.370407][ T2951] EXT4-fs: Ignoring removed orlov option [ 121.388811][ T2951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.409481][ T2951] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 121.438786][ T2957] tipc: Started in network mode [ 121.443459][ T2957] tipc: Node identity 1, cluster identity 4711 [ 121.449625][ T2957] tipc: Node number set to 1 [ 121.454065][ T2957] tipc: Cannot configure node identity twice [ 121.469410][ T2959] loop3: detected capacity change from 0 to 512 [ 121.475940][ T2959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.486615][ T2959] EXT4-fs (loop3): 1 truncate cleaned up [ 121.567467][ T2697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.578229][ T2697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.588359][ T313] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.596120][ T2697] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 121.605079][ T2697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.615320][ T2698] usb 5-1: USB disconnect, device number 9 [ 121.628185][ T2697] usb 3-1: config 0 descriptor?? [ 121.660931][ T2962] device pim6reg1 entered promiscuous mode [ 121.850854][ T2968] loop0: detected capacity change from 0 to 1024 [ 121.857641][ T2968] EXT4-fs: Ignoring removed orlov option [ 121.863424][ T2968] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.987662][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.998836][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.010072][ T313] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 122.019538][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.042308][ T313] usb 2-1: config 0 descriptor?? [ 122.177818][ T2697] hid (null): global environment stack underflow [ 122.219474][ T2974] loop4: detected capacity change from 0 to 16 [ 122.225921][ T2974] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.234087][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 122.252615][ T2697] uclogic 0003:5543:0522.001E: global environment stack underflow [ 122.282052][ T2697] uclogic 0003:5543:0522.001E: item 0 1 1 11 parsing failed [ 122.289418][ T2697] uclogic 0003:5543:0522.001E: parse failed [ 122.295165][ T2697] uclogic: probe of 0003:5543:0522.001E failed with error -22 [ 122.314322][ T2977] loop4: detected capacity change from 0 to 256 [ 122.321024][ T2977] exfat: Deprecated parameter 'utf8' [ 122.326175][ T2977] exfat: Deprecated parameter 'namecase' [ 122.333720][ T2977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 122.365556][ T28] audit: type=1400 audit(2000000014.240:292): avc: denied { append } for pid=2976 comm="syz.4.735" path="/150/file0/cpu.stat" dev="loop4" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.372856][ T2979] loop3: detected capacity change from 0 to 2048 [ 122.395568][ T19] usb 3-1: USB disconnect, device number 13 [ 122.407065][ T28] audit: type=1400 audit(2000000014.280:293): avc: denied { map } for pid=2976 comm="syz.4.735" path="/150/file0/cpu.stat" dev="loop4" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.419133][ T2981] loop4: detected capacity change from 0 to 512 [ 122.438272][ T2979] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.453171][ T2979] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 122.455788][ T2981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.465443][ T2979] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.465443][ T2979] [ 122.477004][ T2981] EXT4-fs (loop4): 1 truncate cleaned up [ 122.485096][ T2979] EXT4-fs (loop3): Total free blocks count 0 [ 122.496080][ T2979] EXT4-fs (loop3): Free/Dirty block details [ 122.501871][ T2979] EXT4-fs (loop3): free_blocks=2415919104 [ 122.507668][ T2979] EXT4-fs (loop3): dirty_blocks=64 [ 122.512719][ T2979] EXT4-fs (loop3): Block reservation details [ 122.519611][ T2979] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 122.525673][ T2985] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 122.538359][ T2985] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.538359][ T2985] [ 122.558954][ T313] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 122.565962][ T313] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 122.572926][ T313] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 122.579859][ T313] zydacron 0003:13EC:0006.001F: unknown main item tag 0x0 [ 122.586773][ T313] zydacron 0003:13EC:0006.001F: item fetching failed at offset 4/5 [ 122.594914][ T313] zydacron 0003:13EC:0006.001F: parse failed [ 122.599013][ T2987] loop3: detected capacity change from 0 to 512 [ 122.600924][ T313] zydacron: probe of 0003:13EC:0006.001F failed with error -22 [ 122.624013][ T2987] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 122.688702][ T2989] device pim6reg1 entered promiscuous mode [ 122.887088][ T294] EXT4-fs unmount: 105 callbacks suppressed [ 122.887103][ T294] EXT4-fs (loop0): unmounting filesystem. [ 122.891992][ T2987] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.738: iget: bad i_size value: -67835469387268086 [ 122.894378][ T313] usb 2-1: USB disconnect, device number 12 [ 122.911127][ T2987] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.738: couldn't read orphan inode 15 (err -117) [ 122.927957][ T2992] loop0: detected capacity change from 0 to 512 [ 122.935124][ T2992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.941001][ T2987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.946137][ T2992] EXT4-fs (loop0): 1 truncate cleaned up [ 122.953624][ T2987] ext2 filesystem being mounted at /139/file0 supports timestamps until 2038 (0x7fffffff) [ 122.959037][ T2992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.994237][ T295] EXT4-fs (loop3): unmounting filesystem. [ 123.026226][ T2995] loop3: detected capacity change from 0 to 256 [ 123.032627][ T2995] exfat: Deprecated parameter 'namecase' [ 123.038288][ T2995] exfat: Deprecated parameter 'namecase' [ 123.043808][ T2995] exfat: Deprecated parameter 'utf8' [ 123.048959][ T2995] exfat: Deprecated parameter 'namecase' [ 123.056663][ T2995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 123.331994][ T3002] netlink: 'syz.3.741': attribute type 27 has an invalid length. [ 123.354285][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.361282][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.399810][ T292] EXT4-fs (loop4): unmounting filesystem. [ 123.402528][ T3003] loop3: detected capacity change from 0 to 512 [ 123.411800][ T3003] EXT4-fs: Ignoring removed bh option [ 123.427971][ T3003] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.434256][ T3003] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 123.456740][ T3003] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.741: invalid indirect mapped block 8 (level 2) [ 123.473733][ T3007] loop1: detected capacity change from 0 to 512 [ 123.482759][ T3008] loop4: detected capacity change from 0 to 512 [ 123.502765][ T3008] EXT4-fs: Ignoring removed nobh option [ 123.525561][ T3008] journal_path: Lookup failure for './bus' [ 123.537483][ T3008] EXT4-fs: error: could not find journal device path [ 123.539322][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.744: corrupted inode contents [ 123.555993][ T3003] EXT4-fs (loop3): Remounting filesystem read-only [ 123.556972][ T3007] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.744: mark_inode_dirty error [ 123.568569][ T3003] EXT4-fs (loop3): 1 truncate cleaned up [ 123.579003][ T3003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 123.603001][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.744: corrupted inode contents [ 123.621050][ T3007] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.744: mark_inode_dirty error [ 123.646713][ T3007] Quota error (device loop1): write_blk: dquota write failed [ 123.660886][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.669443][ T3013] loop4: detected capacity change from 0 to 8192 [ 123.671373][ T3007] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.704025][ T3007] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.744: Failed to acquire dquot type 0 [ 123.718728][ T3003] device veth0_vlan left promiscuous mode [ 123.724558][ T3003] device veth0_vlan entered promiscuous mode [ 123.732081][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.744: corrupted inode contents [ 123.744955][ T3003] device veth1_macvtap left promiscuous mode [ 123.751995][ T3003] device veth1_macvtap entered promiscuous mode [ 123.758488][ T3007] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.744: mark_inode_dirty error [ 123.773980][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.781412][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.795453][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.744: corrupted inode contents [ 123.808044][ T295] EXT4-fs (loop3): unmounting filesystem. [ 123.814593][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.828157][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.835001][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.842372][ T3007] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.744: mark_inode_dirty error [ 123.853022][ T3018] loop4: detected capacity change from 0 to 512 [ 123.855885][ T3017] loop3: detected capacity change from 0 to 512 [ 123.865683][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.744: corrupted inode contents [ 123.869959][ T3018] EXT4-fs: Ignoring removed bh option [ 123.877630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.891093][ T3017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.901378][ T3007] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 123.909942][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.915030][ T3018] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.917945][ T3007] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.744: corrupted inode contents [ 123.935620][ T3018] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 123.935749][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.950292][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.968196][ T3007] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.744: mark_inode_dirty error [ 123.977488][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.979387][ T3018] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.746: invalid indirect mapped block 8 (level 2) [ 123.997623][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 124.007649][ T3017] EXT4-fs (loop3): 1 truncate cleaned up [ 124.007865][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.013259][ T3017] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.021121][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 124.029460][ T3007] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 124.036953][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.053385][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.055865][ T3018] EXT4-fs (loop4): Remounting filesystem read-only [ 124.061249][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.075325][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.082885][ T3007] EXT4-fs (loop1): 1 truncate cleaned up [ 124.083201][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.095298][ T3018] EXT4-fs (loop4): 1 truncate cleaned up [ 124.096406][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.109725][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.117898][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.125945][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.134161][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.141991][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.149926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.156948][ T3007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.157954][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.166671][ T3007] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038 (0x7fffffff) [ 124.183675][ T3018] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.192708][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.200983][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.216459][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.224393][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.624528][ T3027] 9pnet_fd: Insufficient options for proto=fd [ 124.637295][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.770958][ T3029] loop2: detected capacity change from 0 to 256 [ 124.782184][ T3029] exfat: Unknown parameter '|' [ 124.799435][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.800285][ T293] EXT4-fs (loop1): unmounting filesystem. [ 124.807110][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.820014][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.827937][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.835323][ T3015] netlink: 'syz.4.746': attribute type 27 has an invalid length. [ 124.865243][ T28] audit: type=1400 audit(2000000016.740:294): avc: denied { mount } for pid=3028 comm="syz.2.748" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 124.870106][ T294] EXT4-fs (loop0): unmounting filesystem. [ 124.901495][ T28] audit: type=1400 audit(2000000016.770:295): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 124.924646][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.924652][ T3033] loop2: detected capacity change from 0 to 256 [ 124.937659][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.958767][ T3032] loop1: detected capacity change from 0 to 1024 [ 124.965567][ T3032] EXT4-fs: Ignoring removed orlov option [ 124.981185][ T3035] loop0: detected capacity change from 0 to 256 [ 124.987136][ T3037] loop2: detected capacity change from 0 to 128 [ 124.987468][ T3032] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.997991][ T3037] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 125.012419][ T3032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.034915][ T3040] loop0: detected capacity change from 0 to 512 [ 125.045838][ T3040] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.753: inode #1: comm syz.0.753: iget: illegal inode # [ 125.076295][ T3037] FAT-fs (loop2): Filesystem has been set read-only [ 125.090171][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.105294][ T3040] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.753: error while reading EA inode 1 err=-117 [ 125.123816][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.130701][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.144583][ T3040] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.753: inode #1: comm syz.0.753: iget: illegal inode # [ 125.146480][ T3044] loop2: detected capacity change from 0 to 128 [ 125.158920][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.170290][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.178363][ T3040] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.753: error while reading EA inode 1 err=-117 [ 125.191465][ T3044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.197757][ T3040] EXT4-fs (loop0): 1 orphan inode deleted [ 125.206707][ T3018] device veth0_vlan left promiscuous mode [ 125.212347][ T3040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.221135][ T3044] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 125.257710][ T3018] device veth0_vlan entered promiscuous mode [ 125.277453][ T294] EXT4-fs (loop0): unmounting filesystem. [ 125.277761][ T3018] device veth1_macvtap left promiscuous mode [ 125.295299][ T3018] device veth1_macvtap entered promiscuous mode [ 125.309342][ T3049] loop0: detected capacity change from 0 to 512 [ 125.317627][ T3023] device pim6reg1 entered promiscuous mode [ 125.327421][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.328830][ T3049] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.334878][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.351123][ T292] EXT4-fs (loop4): unmounting filesystem. [ 125.351132][ T3049] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 125.351846][ T3049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 125.367067][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.379563][ T3049] System zones: 1-12 [ 125.393101][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.401690][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.409978][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.417806][ T3049] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.755: corrupted in-inode xattr [ 125.418374][ T295] EXT4-fs (loop3): unmounting filesystem. [ 125.436338][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.444989][ T296] EXT4-fs (loop2): unmounting filesystem. [ 125.444995][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.458781][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.462249][ T3049] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.755: couldn't read orphan inode 15 (err -117) [ 125.466834][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.486465][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.494845][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.501630][ T3049] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.502790][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.518740][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.526960][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.535046][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.565378][ T3056] loop4: detected capacity change from 0 to 256 [ 125.571665][ T3054] netlink: 'syz.2.758': attribute type 27 has an invalid length. [ 125.601574][ T294] EXT4-fs (loop0): unmounting filesystem. [ 125.606781][ T3059] loop4: detected capacity change from 0 to 1024 [ 125.616637][ T3059] EXT4-fs: Ignoring removed orlov option [ 125.630443][ T3060] loop2: detected capacity change from 0 to 512 [ 125.647712][ T3059] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.657217][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.664215][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.685786][ T3060] EXT4-fs: Ignoring removed bh option [ 125.709757][ T3059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.729083][ T3060] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.798207][ T3060] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 125.817614][ T3067] 9pnet_fd: Insufficient options for proto=fd [ 125.895553][ T3060] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.758: invalid indirect mapped block 8 (level 2) [ 125.977746][ T3060] EXT4-fs (loop2): Remounting filesystem read-only [ 125.984250][ T3060] EXT4-fs (loop2): 1 truncate cleaned up [ 125.989876][ T3060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.049643][ T296] EXT4-fs (loop2): unmounting filesystem. [ 126.355871][ T293] EXT4-fs (loop1): unmounting filesystem. [ 126.397522][ T313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.421706][ T3057] loop3: detected capacity change from 0 to 40427 [ 126.430418][ T3057] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 126.436657][ T3057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 126.461364][ T292] EXT4-fs (loop4): unmounting filesystem. [ 126.469123][ T3057] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 126.538396][ T3081] loop0: detected capacity change from 0 to 256 [ 126.563015][ T3057] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 126.570125][ T3057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.588674][ T295] syz-executor: attempt to access beyond end of device [ 126.588674][ T295] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.687476][ T2382] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.820785][ T3089] loop0: detected capacity change from 0 to 512 [ 126.828366][ T3089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.838116][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.850134][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.859893][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 126.868928][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.882431][ T313] usb 3-1: config 0 descriptor?? [ 126.888339][ T3089] EXT4-fs (loop0): 1 truncate cleaned up [ 126.896863][ T3092] loop3: detected capacity change from 0 to 512 [ 126.898249][ T3089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.939161][ T3092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.948044][ T3092] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038 (0x7fffffff) [ 127.093895][ T3097] device pim6reg1 entered promiscuous mode [ 127.378114][ T2382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.378205][ T2382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.378336][ T2382] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 127.378422][ T2382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.383300][ T2382] usb 2-1: config 0 descriptor?? [ 127.470368][ T3102] xt_hashlimit: size too large, truncated to 1048576 [ 127.604088][ T3105] loop4: detected capacity change from 0 to 512 [ 127.619284][ T3105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.628191][ T3105] ext4 filesystem being mounted at /159/bus supports timestamps until 2038 (0x7fffffff) [ 127.646738][ T292] EXT4-fs (loop4): unmounting filesystem. [ 127.669828][ T3109] loop4: detected capacity change from 0 to 2048 [ 127.678856][ T3109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.704544][ T294] EXT4-fs (loop0): unmounting filesystem. [ 127.710527][ T28] audit: type=1400 audit(2000000019.600:296): avc: denied { ioctl } for pid=3108 comm="syz.4.770" path="/160/file0/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.754533][ T292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.770724][ T313] logitech-hidpp-device 0003:046D:C086.0020: ignoring exceeding usage max [ 127.780543][ T295] EXT4-fs (loop3): unmounting filesystem. [ 127.801249][ T313] logitech-hidpp-device 0003:046D:C086.0020: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 127.815774][ T3115] netlink: 'syz.0.771': attribute type 27 has an invalid length. [ 127.823622][ T292] EXT4-fs (loop4): Remounting filesystem read-only [ 127.832912][ T292] EXT4-fs (loop4): unmounting filesystem. [ 127.855562][ T3115] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.862573][ T3115] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.865167][ T3118] loop4: detected capacity change from 0 to 2048 [ 127.870885][ T2382] cypress 0003:04B4:07B1.0021: unknown main item tag 0x0 [ 127.880386][ T3119] loop0: detected capacity change from 0 to 512 [ 127.884285][ T2382] cypress 0003:04B4:07B1.0021: item fetching failed at offset 4/5 [ 127.889443][ T3119] EXT4-fs: Ignoring removed bh option [ 127.898970][ T2382] cypress 0003:04B4:07B1.0021: parse failed [ 127.908720][ T2382] cypress: probe of 0003:04B4:07B1.0021 failed with error -22 [ 127.917082][ T3119] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.925719][ T3118] Alternate GPT is invalid, using primary GPT. [ 127.932744][ T3119] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 127.936854][ T3118] loop4: p1 p2 p3 [ 127.944748][ T3119] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.771: invalid indirect mapped block 8 (level 2) [ 127.958514][ T3119] EXT4-fs (loop0): Remounting filesystem read-only [ 127.965009][ T3119] EXT4-fs (loop0): 1 truncate cleaned up [ 127.970865][ T3119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.998811][ T313] usb 3-1: USB disconnect, device number 14 [ 128.038097][ T294] EXT4-fs (loop0): unmounting filesystem. [ 128.057395][ T2231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.070439][ T3122] loop4: detected capacity change from 0 to 512 [ 128.076820][ T2382] usb 2-1: USB disconnect, device number 13 [ 128.089057][ T3122] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.110394][ T3122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.774: bg 0: block 64: padding at end of block bitmap is not set [ 128.111404][ T3126] loop0: detected capacity change from 0 to 512 [ 128.124596][ T3122] Quota error (device loop4): write_blk: dquota write failed [ 128.138456][ T3122] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 128.148959][ T3122] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.774: Failed to acquire dquot type 0 [ 128.150151][ T3126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.169829][ T3122] EXT4-fs (loop4): 1 truncate cleaned up [ 128.175386][ T3122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.194831][ T3126] EXT4-fs (loop0): 1 orphan inode deleted [ 128.200474][ T3126] EXT4-fs (loop0): 1 truncate cleaned up [ 128.205847][ T3126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.222863][ T28] audit: type=1400 audit(2000000020.100:297): avc: denied { create } for pid=3121 comm="syz.4.774" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 128.237761][ T3122] Quota error (device loop4): write_blk: dquota write failed [ 128.252360][ T294] EXT4-fs (loop0): unmounting filesystem. [ 128.257470][ T3122] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 128.267771][ T3122] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.774: Failed to acquire dquot type 0 [ 128.300670][ T3131] loop0: detected capacity change from 0 to 2048 [ 128.310225][ T292] EXT4-fs (loop4): unmounting filesystem. [ 128.348222][ T3131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.356616][ T3131] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038 (0x7fffffff) [ 128.378761][ T3131] fs-verity: sha256 using implementation "sha256-avx2" [ 128.385938][ T3131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.777: bg 0: block 345: padding at end of block bitmap is not set [ 128.400625][ T3131] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 0 [ 128.408786][ T3131] fs-verity (loop0, inode 13): Error -117 building Merkle tree [ 128.417455][ T2231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.428405][ T2231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.437108][ T294] EXT4-fs (loop0): unmounting filesystem. [ 128.437977][ T2231] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 128.452477][ T2231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.460921][ T2231] usb 4-1: config 0 descriptor?? [ 128.546085][ T3139] loop2: detected capacity change from 0 to 2048 [ 128.608778][ T3139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.617083][ T3139] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038 (0x7fffffff) [ 128.629944][ T3142] loop1: detected capacity change from 0 to 512 [ 128.678944][ T296] EXT4-fs (loop2): unmounting filesystem. [ 128.684393][ T3137] loop0: detected capacity change from 0 to 40427 [ 128.692325][ T3142] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.781: Invalid inode bitmap blk 4 in block_group 0 [ 128.710468][ T3137] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 128.727538][ T3137] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.732150][ T3146] loop2: detected capacity change from 0 to 512 [ 128.742274][ T3137] F2FS-fs (loop0): invalid crc value [ 128.751179][ T3142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.753563][ T3137] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 128.760248][ T3146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.766001][ T3137] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 128.790368][ T293] EXT4-fs (loop1): unmounting filesystem. [ 128.798710][ T3146] EXT4-fs (loop2): 1 truncate cleaned up [ 128.806776][ T3146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.822072][ T3150] loop1: detected capacity change from 0 to 512 [ 128.888565][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.783: corrupted inode contents [ 128.907059][ T3150] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.783: mark_inode_dirty error [ 128.988132][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.783: corrupted inode contents [ 129.026209][ T3154] device pim6reg1 entered promiscuous mode [ 129.055322][ T3150] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.783: mark_inode_dirty error [ 129.167889][ T2231] samsung 0003:0419:0600.0022: unknown main item tag 0x0 [ 129.171975][ T3150] Quota error (device loop1): write_blk: dquota write failed [ 129.175373][ T2231] samsung 0003:0419:0600.0022: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 129.196642][ T2231] usb 4-1: USB disconnect, device number 8 [ 129.217447][ T3150] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 129.227188][ T3150] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.783: Failed to acquire dquot type 0 [ 129.247848][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.783: corrupted inode contents [ 129.277851][ T3150] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.783: mark_inode_dirty error [ 129.297558][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.783: corrupted inode contents [ 129.327559][ T3150] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.783: mark_inode_dirty error [ 129.347561][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.783: corrupted inode contents [ 129.359316][ T3150] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 129.367807][ T3150] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.783: corrupted inode contents [ 129.379511][ T3150] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.783: mark_inode_dirty error [ 129.390517][ T3150] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 129.399830][ T3150] EXT4-fs (loop1): 1 truncate cleaned up [ 129.405289][ T3150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.406787][ T3137] loop0: detected capacity change from 0 to 40427 [ 129.414068][ T3150] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038 (0x7fffffff) [ 129.443787][ T3137] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.449786][ T3133] loop4: detected capacity change from 0 to 131072 [ 129.459556][ T3137] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.461533][ T3133] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.492019][ T3137] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.529697][ T3137] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.536629][ T3137] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.565504][ T3133] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 129.589225][ T28] audit: type=1400 audit(2000000021.470:298): avc: denied { create } for pid=3132 comm="syz.4.778" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 129.649752][ T296] EXT4-fs (loop2): unmounting filesystem. [ 129.852374][ T3166] loop2: detected capacity change from 0 to 256 [ 129.874699][ T293] EXT4-fs (loop1): unmounting filesystem. [ 129.915472][ T3166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 130.006377][ T3175] loop0: detected capacity change from 0 to 1024 [ 130.047832][ T3175] EXT4-fs: Ignoring removed orlov option [ 130.085776][ T3175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.137453][ T2382] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.170162][ T294] EXT4-fs (loop0): unmounting filesystem. [ 130.185012][ T3179] loop4: detected capacity change from 0 to 2048 [ 130.237001][ T3171] loop1: detected capacity change from 0 to 40427 [ 130.260600][ T3171] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.262187][ T3181] loop0: detected capacity change from 0 to 2048 [ 130.268635][ T3171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.294591][ T3184] netlink: 'syz.4.791': attribute type 27 has an invalid length. [ 130.312352][ T3171] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.325829][ T3181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.338000][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.344407][ T3181] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038 (0x7fffffff) [ 130.344978][ T3184] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.366336][ T3189] loop4: detected capacity change from 0 to 512 [ 130.374941][ T3173] loop2: detected capacity change from 0 to 40427 [ 130.387451][ T2382] usb 4-1: Using ep0 maxpacket: 16 [ 130.392564][ T3173] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 130.399211][ T3189] EXT4-fs: Ignoring removed bh option [ 130.405557][ T294] EXT4-fs (loop0): unmounting filesystem. [ 130.412089][ T3189] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.418531][ T3171] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 130.425537][ T3171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.427489][ T3173] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 130.432994][ T3189] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 130.459477][ T3189] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.791: invalid indirect mapped block 8 (level 2) [ 130.493230][ T3189] EXT4-fs (loop4): Remounting filesystem read-only [ 130.502279][ T3173] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 130.559706][ T3189] EXT4-fs (loop4): 1 truncate cleaned up [ 130.565310][ T2382] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 130.568814][ T3189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.574833][ T2382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.592172][ T2382] usb 4-1: config 0 has no interface number 0 [ 130.602517][ T3173] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 130.630323][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.634077][ T3173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.645143][ T2382] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.833590][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.840491][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.848364][ T2382] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 130.859652][ T3203] loop1: detected capacity change from 0 to 256 [ 130.866386][ T2382] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 130.881328][ T2382] usb 4-1: Product: syz [ 130.887098][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.893960][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.901178][ T2382] usb 4-1: SerialNumber: syz [ 130.915557][ T2382] usb 4-1: config 0 descriptor?? [ 130.928793][ T3189] device veth0_vlan left promiscuous mode [ 130.932183][ T3206] loop1: detected capacity change from 0 to 1024 [ 130.934814][ T3189] device veth0_vlan entered promiscuous mode [ 130.949024][ T3189] device veth1_macvtap left promiscuous mode [ 130.960254][ T3189] device veth1_macvtap entered promiscuous mode [ 130.963394][ T3206] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 130.985402][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.003838][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.014770][ T292] EXT4-fs (loop4): unmounting filesystem. [ 131.023829][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.045523][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.058485][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.066762][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.080338][ T3215] loop2: detected capacity change from 0 to 1024 [ 131.086959][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.095794][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.104428][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.117287][ T3217] loop4: detected capacity change from 0 to 512 [ 131.125564][ T3215] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.795: Invalid block bitmap block 0 in block_group 0 [ 131.143445][ T3217] EXT4-fs: Ignoring removed bh option [ 131.149118][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.158351][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.166373][ T3215] Quota error (device loop2): write_blk: dquota write failed [ 131.174447][ T3217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.184212][ T3217] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.184496][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.203076][ T2382] snd-usb-audio: probe of 4-1:0.2 failed with error -2 [ 131.210104][ T3215] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.795: Failed to acquire dquot type 0 [ 131.213174][ T3217] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.797: invalid indirect mapped block 8 (level 2) [ 131.222824][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.237640][ T3215] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.795: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.242401][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.258043][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.262982][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.284952][ T3211] loop1: detected capacity change from 0 to 40427 [ 131.285970][ T3213] netlink: 'syz.4.797': attribute type 27 has an invalid length. [ 131.313958][ T3213] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.320872][ T3213] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.337978][ T3211] F2FS-fs (loop1): invalid crc value [ 131.339331][ T3217] EXT4-fs (loop4): Remounting filesystem read-only [ 131.350890][ T3215] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.795: Invalid inode bitmap blk 0 in block_group 0 [ 131.351647][ T3217] EXT4-fs (loop4): 1 truncate cleaned up [ 131.364069][ T3215] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 131.370760][ T3217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.378450][ T943] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:6: Failed to release dquot type 0 [ 131.399533][ T3211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.417089][ T3215] EXT4-fs (loop2): 1 orphan inode deleted [ 131.424434][ T2698] usb 4-1: USB disconnect, device number 9 [ 131.430155][ T3215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.449605][ T3217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 131.469323][ T292] EXT4-fs (loop4): unmounting filesystem. [ 131.475132][ T3211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 131.496692][ T293] syz-executor: attempt to access beyond end of device [ 131.496692][ T293] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 131.511262][ T3226] netlink: 'syz.4.800': attribute type 27 has an invalid length. [ 131.523286][ T3226] loop4: detected capacity change from 0 to 512 [ 131.533750][ T3226] EXT4-fs: Ignoring removed bh option [ 131.542899][ T3226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.549407][ T3226] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.557597][ T3226] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.800: invalid indirect mapped block 8 (level 2) [ 131.571300][ T3226] EXT4-fs (loop4): Remounting filesystem read-only [ 131.578177][ T3226] EXT4-fs (loop4): 1 truncate cleaned up [ 131.583678][ T3226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.597486][ T2697] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 131.612672][ T3229] loop1: detected capacity change from 0 to 512 [ 131.621012][ T292] EXT4-fs (loop4): unmounting filesystem. [ 131.633610][ T3231] loop4: detected capacity change from 0 to 16 [ 131.641661][ T3231] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.663880][ T3235] loop4: detected capacity change from 0 to 512 [ 131.668397][ T3229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.678841][ T3235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.679287][ T3229] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038 (0x7fffffff) [ 131.702167][ T3235] EXT4-fs (loop4): 1 truncate cleaned up [ 131.707994][ T3235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.888790][ T3239] device pim6reg1 entered promiscuous mode [ 132.136221][ T296] EXT4-fs (loop2): unmounting filesystem. [ 132.227615][ T2697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.263731][ T2697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.277059][ T3246] loop2: detected capacity change from 0 to 256 [ 132.288242][ T3246] exfat: Deprecated parameter 'utf8' [ 132.301315][ T3246] exfat: Deprecated parameter 'utf8' [ 132.310636][ T2697] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.323126][ T2697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.326043][ T3252] netlink: 'syz.3.808': attribute type 27 has an invalid length. [ 132.331609][ T2697] usb 1-1: config 0 descriptor?? [ 132.345687][ T3246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 132.365272][ T3252] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.372257][ T3252] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.387056][ T3253] loop3: detected capacity change from 0 to 512 [ 132.389552][ T3255] loop2: detected capacity change from 0 to 128 [ 132.411212][ T3253] EXT4-fs: Ignoring removed bh option [ 132.429530][ T3253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.443106][ T3253] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 132.454115][ T3258] loop2: detected capacity change from 0 to 256 [ 132.484126][ T3260] netlink: 'syz.1.811': attribute type 27 has an invalid length. [ 132.489413][ T3253] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.808: invalid indirect mapped block 8 (level 2) [ 132.504860][ T3258] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 132.504900][ T3253] EXT4-fs (loop3): Remounting filesystem read-only [ 132.523634][ T3253] EXT4-fs (loop3): 1 truncate cleaned up [ 132.537984][ T3261] loop1: detected capacity change from 0 to 512 [ 132.549159][ T3261] EXT4-fs: Ignoring removed bh option [ 132.556921][ T3261] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.568471][ T3261] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 132.581071][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.587558][ T3261] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.811: invalid indirect mapped block 8 (level 2) [ 132.588059][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.602408][ T3261] EXT4-fs (loop1): Remounting filesystem read-only [ 132.614129][ T3261] EXT4-fs (loop1): 1 truncate cleaned up [ 132.644703][ T3252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.656638][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.663493][ T3252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.672916][ T3252] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.679782][ T3252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.705042][ T3252] device veth0_vlan left promiscuous mode [ 132.711194][ T3252] device veth0_vlan entered promiscuous mode [ 132.719052][ T3252] device veth1_macvtap left promiscuous mode [ 132.725868][ T3252] device veth1_macvtap entered promiscuous mode [ 132.735772][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.744503][ T3264] loop4: detected capacity change from 0 to 256 [ 132.750928][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.762313][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.787973][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.796270][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.804360][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.814106][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.822718][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.828204][ T2697] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 132.841324][ T3267] loop4: detected capacity change from 0 to 2048 [ 132.843291][ T2697] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 132.847833][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.873104][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.874664][ T2697] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.881776][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.910141][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.927716][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.935860][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.943667][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 132.943681][ T28] audit: type=1400 audit(2000000024.830:300): avc: denied { read } for pid=3269 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.945374][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.949812][ T28] audit: type=1400 audit(2000000024.830:301): avc: denied { open } for pid=3269 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.982547][ T3261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 133.039773][ T3271] netlink: 'syz.3.814': attribute type 27 has an invalid length. [ 133.056396][ T3275] loop1: detected capacity change from 0 to 1024 [ 133.081753][ T3276] loop3: detected capacity change from 0 to 512 [ 133.090707][ T3275] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 133.096623][ T3276] EXT4-fs: Ignoring removed bh option [ 133.106690][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.113674][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.122625][ T3276] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.138179][ T3275] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 133.148456][ T3276] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 133.158754][ T3276] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.814: invalid indirect mapped block 8 (level 2) [ 133.171808][ T3275] EXT4-fs error (device loop1): ext4_get_journal_inode:5720: inode #5: comm syz.1.819: unexpected bad inode w/o EXT4_IGET_BAD [ 133.187124][ T2382] usb 1-1: USB disconnect, device number 10 [ 133.209023][ T3275] EXT4-fs (loop1): no journal found [ 133.215257][ T3276] EXT4-fs (loop3): Remounting filesystem read-only [ 133.221940][ T3275] EXT4-fs (loop1): can't get journal size [ 133.247627][ T3276] EXT4-fs (loop3): 1 truncate cleaned up [ 133.269547][ T3275] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.819: bg 0: block 32: padding at end of block bitmap is not set [ 133.317104][ T3271] Zero length message leads to an empty skb [ 133.384658][ T3283] loop1: detected capacity change from 0 to 512 [ 133.387164][ T3285] loop3: detected capacity change from 0 to 512 [ 133.418233][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.418453][ T3283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.425171][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.442685][ T3285] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038 (0x7fffffff) [ 133.444361][ T3269] device bridge_slave_0 entered promiscuous mode [ 133.463840][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.470829][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.478249][ T3283] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.820: bad orphan inode 131083 [ 133.515996][ T3269] device bridge_slave_1 entered promiscuous mode [ 133.527066][ T28] audit: type=1400 audit(2000000025.410:302): avc: denied { setattr } for pid=3282 comm="syz.1.820" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.548955][ T28] audit: type=1400 audit(2000000025.410:303): avc: denied { remove_name } for pid=3282 comm="syz.1.820" name="#39" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.570918][ T28] audit: type=1400 audit(2000000025.410:304): avc: denied { rename } for pid=3282 comm="syz.1.820" name="#39" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.592483][ T28] audit: type=1400 audit(2000000025.410:305): avc: denied { unlink } for pid=3282 comm="syz.1.820" name="#39" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.614170][ T28] audit: type=1400 audit(2000000025.410:306): avc: denied { link } for pid=3282 comm="syz.1.820" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.642575][ T28] audit: type=1400 audit(2000000025.410:307): avc: denied { write open } for pid=3282 comm="syz.1.820" path=2F202864656C6574656429 dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.666688][ T28] audit: type=1400 audit(2000000025.410:308): avc: denied { setattr } for pid=3282 comm="syz.1.820" name="#20" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.860771][ T3295] loop0: detected capacity change from 0 to 512 [ 133.908632][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.823: corrupted inode contents [ 133.934671][ T3295] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.823: mark_inode_dirty error [ 133.967780][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.823: corrupted inode contents [ 133.985055][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.991922][ T3269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.999028][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.005796][ T3269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.013391][ T3295] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.823: mark_inode_dirty error [ 134.024884][ T3295] Quota error (device loop0): write_blk: dquota write failed [ 134.033125][ T3295] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.823: Failed to acquire dquot type 0 [ 134.045576][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.823: corrupted inode contents [ 134.058078][ T3295] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.823: mark_inode_dirty error [ 134.069896][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.823: corrupted inode contents [ 134.082030][ T8] device bridge_slave_1 left promiscuous mode [ 134.088114][ T3295] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.823: mark_inode_dirty error [ 134.088393][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.099285][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.823: corrupted inode contents [ 134.107475][ T3274] loop4: detected capacity change from 0 to 131072 [ 134.117640][ T3295] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 134.132410][ T3295] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.823: corrupted inode contents [ 134.133767][ T8] device bridge_slave_0 left promiscuous mode [ 134.144208][ T3295] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.823: mark_inode_dirty error [ 134.151395][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.160844][ T3295] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 134.167712][ T3274] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 134.176581][ T3295] EXT4-fs (loop0): 1 truncate cleaned up [ 134.189718][ T3295] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038 (0x7fffffff) [ 134.191299][ T3274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.273335][ T3274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.288984][ T3306] syz.3.826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.310138][ T2382] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.318369][ T2382] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.528122][ T3274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 134.535717][ T3311] loop3: detected capacity change from 0 to 512 [ 134.537443][ T3274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.545507][ T3311] EXT4-fs: Ignoring removed nobh option [ 134.557414][ T3311] journal_path: Lookup failure for './bus' [ 134.560645][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.569617][ T3311] EXT4-fs: error: could not find journal device path [ 134.574488][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.585805][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.595799][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.618198][ T2382] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.625053][ T2382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.647734][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.667749][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.675838][ T2382] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.682694][ T2382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.728521][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.738368][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.746138][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.774291][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.786897][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.796553][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.817820][ T3299] device bridge_slave_0 entered promiscuous mode [ 134.845105][ T3269] device veth0_vlan entered promiscuous mode [ 134.848811][ T3317] loop3: detected capacity change from 0 to 40427 [ 134.867441][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.874289][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.881388][ T3317] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.889288][ T3317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.898566][ T3299] device bridge_slave_1 entered promiscuous mode [ 134.908362][ T3317] F2FS-fs (loop3): invalid crc value [ 134.914125][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.925433][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.933789][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.945222][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.947103][ T3325] loop4: detected capacity change from 0 to 256 [ 134.955496][ T3269] device veth1_macvtap entered promiscuous mode [ 134.958925][ T3317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.981275][ T3325] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 134.998881][ T3317] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 135.010366][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.017814][ T3317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.018045][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.024652][ T3317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.057916][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.065965][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.075171][ T2231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.092412][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.100803][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.109750][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.117858][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.143586][ T8] tipc: Left network mode [ 135.181240][ T3333] loop2: detected capacity change from 0 to 1024 [ 135.207830][ T3333] EXT4-fs: Ignoring removed orlov option [ 135.214370][ T3333] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.216443][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.227836][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.234918][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.241713][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.273173][ T2698] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.281256][ T2698] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.288774][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.296191][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.322968][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.331473][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.338348][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.345885][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.347721][ T3341] loop2: detected capacity change from 0 to 256 [ 135.353995][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.366601][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.374960][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.382876][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.402797][ T3341] exfat: Deprecated parameter 'namecase' [ 135.407283][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.416749][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.422459][ T3341] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 135.428345][ T3299] device veth0_vlan entered promiscuous mode [ 135.448751][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.456617][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.471986][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.487980][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.495340][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.503643][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.513640][ T3299] device veth1_macvtap entered promiscuous mode [ 135.525221][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.533083][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.541511][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.566950][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.577037][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.578190][ T3343] loop0: detected capacity change from 0 to 256 [ 135.611241][ T3345] loop1: detected capacity change from 0 to 512 [ 135.621464][ T3345] ext4: Bad value for 'max_batch_time' [ 135.669816][ T3343] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 135.820557][ T3352] loop1: detected capacity change from 0 to 16 [ 135.830442][ T3352] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.838374][ T46] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 135.865257][ T3351] loop2: detected capacity change from 0 to 8192 [ 135.888374][ T8] device bridge_slave_1 left promiscuous mode [ 135.917532][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.925050][ T8] device bridge_slave_0 left promiscuous mode [ 135.940058][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.188996][ T3349] loop0: detected capacity change from 0 to 40427 [ 136.205948][ T3349] F2FS-fs (loop0): fault_injection options not supported [ 136.217420][ T3349] F2FS-fs (loop0): heap/no_heap options were deprecated [ 136.224206][ T3349] F2FS-fs (loop0): Image doesn't support compression [ 136.244446][ T3349] F2FS-fs (loop0): invalid crc value [ 136.268307][ T3349] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.313024][ T3330] loop4: detected capacity change from 0 to 131072 [ 136.327527][ T3330] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 136.337647][ T3330] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 136.346199][ T3349] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.347410][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.359317][ T3360] f2fs_ckpt-7:0: attempt to access beyond end of device [ 136.359317][ T3360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.374868][ T3330] F2FS-fs (loop4): invalid crc value [ 136.410566][ T3330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.524745][ T3370] loop1: detected capacity change from 0 to 256 [ 136.534642][ T3330] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.535004][ T3370] exfat: Deprecated parameter 'utf8' [ 136.547511][ T3330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 136.555484][ T3370] exfat: Deprecated parameter 'namecase' [ 136.561230][ T3370] exfat: Deprecated parameter 'utf8' [ 136.574362][ T3370] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 136.586767][ T3330] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 136.607444][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 136.613347][ T3330] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 136.651221][ T3374] loop1: detected capacity change from 0 to 512 [ 136.678324][ T3374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.718708][ T3374] EXT4-fs (loop1): 1 truncate cleaned up [ 136.728895][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.758832][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.777462][ T19] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 136.806642][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.817419][ T1282] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.851229][ T19] usb 4-1: config 0 descriptor?? [ 136.863807][ T3354] loop2: detected capacity change from 0 to 131072 [ 136.956216][ T3379] device pim6reg1 entered promiscuous mode [ 137.063525][ T3354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.104699][ T3382] loop4: detected capacity change from 0 to 512 [ 137.112413][ T3382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.123291][ T3382] EXT4-fs (loop4): 1 truncate cleaned up [ 137.147485][ T3354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.298301][ T3385] loop4: detected capacity change from 0 to 40427 [ 137.312067][ T3385] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 137.319712][ T3385] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.327718][ T1282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.339183][ T3385] F2FS-fs (loop4): invalid crc value [ 137.344325][ T1282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.354396][ T1282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.367168][ T1282] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.376798][ T3385] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.390412][ T1282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.408299][ T1282] usb 1-1: config 0 descriptor?? [ 137.415243][ T3392] loop2: detected capacity change from 0 to 1024 [ 137.429760][ T3385] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.436808][ T3385] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.449555][ T19] samsung 0003:0419:0001.0024: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 137.507088][ T3399] netlink: 'syz.2.848': attribute type 27 has an invalid length. [ 137.564180][ T3399] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.568510][ T3403] loop1: detected capacity change from 0 to 128 [ 137.571192][ T3399] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.585513][ T3401] loop2: detected capacity change from 0 to 512 [ 137.592668][ T3401] EXT4-fs: Ignoring removed bh option [ 137.606016][ T3401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.606400][ T3403] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 137.623048][ T3401] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 137.642399][ T3401] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.848: invalid indirect mapped block 8 (level 2) [ 137.670305][ T3385] syz.4.845: attempt to access beyond end of device [ 137.670305][ T3385] loop4: rw=2049, sector=77824, nr_sectors = 2584 limit=40427 [ 137.690251][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 0 [ 137.705023][ T3401] EXT4-fs (loop2): Remounting filesystem read-only [ 137.705720][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 1024 [ 137.711435][ T19] usb 4-1: USB disconnect, device number 10 [ 137.732877][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 137.737008][ T3385] syz.4.845: attempt to access beyond end of device [ 137.737008][ T3385] loop4: rw=2049, sector=80408, nr_sectors = 1512 limit=40427 [ 137.760853][ T3385] syz.4.845: attempt to access beyond end of device [ 137.760853][ T3385] loop4: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 137.767082][ T3401] EXT4-fs (loop2): 1 truncate cleaned up [ 137.805124][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 3072 [ 137.823663][ T3399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.834605][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 5120 [ 137.835589][ T3385] syz.4.845: attempt to access beyond end of device [ 137.835589][ T3385] loop4: rw=2049, sector=57344, nr_sectors = 20480 limit=40427 [ 137.850668][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 8192 [ 137.878928][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.879131][ T3385] syz.4.845: attempt to access beyond end of device [ 137.879131][ T3385] loop4: rw=2049, sector=81920, nr_sectors = 3960 limit=40427 [ 137.885782][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.888799][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.900963][ T1282] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 137.906545][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.929493][ T3299] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 137.929511][ T1282] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 137.947419][ T3399] device veth0_vlan left promiscuous mode [ 137.959505][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 0 [ 137.967933][ T3399] device veth0_vlan entered promiscuous mode [ 137.976424][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 1024 [ 137.981564][ T292] syz-executor: attempt to access beyond end of device [ 137.981564][ T292] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 137.994778][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.015394][ T3399] device veth1_macvtap left promiscuous mode [ 138.025572][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 3072 [ 138.032770][ T3399] device veth1_macvtap entered promiscuous mode [ 138.044076][ T332] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 138.063038][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.072736][ T332] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 138.074483][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.094914][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.095788][ T3299] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /4/file1/lost+found: directory fails checksum at offset 5120 [ 138.103245][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.126008][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.130054][ T3407] loop2: detected capacity change from 0 to 512 [ 138.134305][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.149888][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.157961][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.166010][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.174514][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.175399][ T3407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.184393][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.200683][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.218557][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 138.226605][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.227149][ T3407] EXT4-fs (loop2): 1 truncate cleaned up [ 138.234935][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 138.248082][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.248227][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.256007][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.279178][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.287131][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.287459][ T1282] usb 1-1: USB disconnect, device number 11 [ 138.295054][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.318161][ T3411] loop3: detected capacity change from 0 to 512 [ 138.367987][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.385567][ T3411] EXT4-fs (loop3): 1 orphan inode deleted [ 138.391419][ T3411] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 138.401636][ T332] __quota_error: 8 callbacks suppressed [ 138.401650][ T332] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 138.417763][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.436714][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.466888][ T3416] netlink: 'syz.4.851': attribute type 27 has an invalid length. [ 138.498928][ T332] EXT4-fs error (device loop3): ext4_release_dquot:6787: comm kworker/u4:3: Failed to release dquot type 1 [ 138.522077][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.616109][ T3416] loop4: detected capacity change from 0 to 512 [ 138.623113][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.629275][ T3416] EXT4-fs: Ignoring removed bh option [ 138.639499][ T3299] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 138.660958][ T3416] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.667455][ T3416] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 138.676475][ T3416] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.851: invalid indirect mapped block 8 (level 2) [ 138.703137][ T3416] EXT4-fs (loop4): Remounting filesystem read-only [ 138.715815][ T3416] EXT4-fs (loop4): 1 truncate cleaned up [ 138.781322][ T3422] loop3: detected capacity change from 0 to 1024 [ 138.787899][ T3422] EXT4-fs: Ignoring removed orlov option [ 138.793658][ T3422] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.808438][ T3424] loop4: detected capacity change from 0 to 512 [ 138.866335][ T3424] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038 (0x7fffffff) [ 138.893778][ T3429] loop0: detected capacity change from 0 to 512 [ 139.150928][ T3429] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.210746][ T3429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.346338][ T3429] EXT4-fs (loop0): 1 orphan inode deleted [ 139.370979][ T3429] EXT4-fs (loop0): 1 truncate cleaned up [ 139.398951][ T28] audit: type=1400 audit(2000000031.280:316): avc: denied { map } for pid=3428 comm="syz.0.857" path="/175/bus/pids.current" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.401189][ T3443] loop2: detected capacity change from 0 to 512 [ 139.428327][ T3428] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 139.456131][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.860: corrupted inode contents [ 139.482900][ T3443] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.860: mark_inode_dirty error [ 139.496752][ T3447] loop0: detected capacity change from 0 to 512 [ 139.504413][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.860: corrupted inode contents [ 139.527537][ T3443] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.860: mark_inode_dirty error [ 139.540129][ T3447] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.861: casefold flag without casefold feature [ 139.553419][ T3443] Quota error (device loop2): write_blk: dquota write failed [ 139.557509][ T3447] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.861: missing EA_INODE flag [ 139.561195][ T3443] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 139.581717][ T3447] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.861: error while reading EA inode 2 err=-117 [ 139.581786][ T3443] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.860: Failed to acquire dquot type 0 [ 139.594380][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.860: corrupted inode contents [ 139.617756][ T3443] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.860: mark_inode_dirty error [ 139.639281][ T3447] EXT4-fs (loop0): 1 orphan inode deleted [ 139.654039][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.668027][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.860: corrupted inode contents [ 139.701462][ T3454] loop3: detected capacity change from 0 to 1024 [ 139.708019][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.715107][ T3443] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.860: mark_inode_dirty error [ 139.717739][ T3454] EXT4-fs: Ignoring removed orlov option [ 139.726953][ T3448] device bridge_slave_0 entered promiscuous mode [ 139.734573][ T3454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.748589][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.860: corrupted inode contents [ 139.749229][ T3456] netlink: 'syz.4.863': attribute type 27 has an invalid length. [ 139.772336][ T3458] loop4: detected capacity change from 0 to 512 [ 139.779409][ T3458] EXT4-fs: Ignoring removed bh option [ 139.784944][ T3443] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 139.797760][ T3443] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.860: corrupted inode contents [ 139.805594][ T3458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.809559][ T3443] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.860: mark_inode_dirty error [ 139.826865][ T3458] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 139.827158][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.842244][ T3458] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.863: invalid indirect mapped block 8 (level 2) [ 139.855949][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.870840][ T3443] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 139.899656][ T3448] device bridge_slave_1 entered promiscuous mode [ 139.908575][ T3458] EXT4-fs (loop4): Remounting filesystem read-only [ 139.918245][ T3458] EXT4-fs (loop4): 1 truncate cleaned up [ 139.919008][ T3443] EXT4-fs (loop2): 1 truncate cleaned up [ 139.930058][ T3443] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 139.993916][ T3456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 140.445639][ T3467] device pim6reg1 entered promiscuous mode [ 140.608991][ T3476] loop4: detected capacity change from 0 to 512 [ 140.613129][ T3475] netlink: 'syz.4.866': attribute type 27 has an invalid length. [ 140.627485][ T3476] EXT4-fs: Ignoring removed bh option [ 140.638420][ T3476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.645660][ T332] device bridge_slave_1 left promiscuous mode [ 140.652287][ T3476] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 140.660637][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.668977][ T332] device bridge_slave_0 left promiscuous mode [ 140.681742][ T3481] loop2: detected capacity change from 0 to 512 [ 140.691167][ T3476] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.866: invalid indirect mapped block 8 (level 2) [ 140.697473][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.710656][ T3481] EXT4-fs: Ignoring removed bh option [ 140.716769][ T332] device veth1_macvtap left promiscuous mode [ 140.722714][ T332] device veth0_vlan left promiscuous mode [ 140.723431][ T3476] EXT4-fs (loop4): Remounting filesystem read-only [ 140.740871][ T3476] EXT4-fs (loop4): 1 truncate cleaned up [ 140.751750][ T3481] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.767565][ T3481] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 140.785414][ T3481] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.867: invalid indirect mapped block 8 (level 2) [ 140.798899][ T3481] EXT4-fs (loop2): Remounting filesystem read-only [ 140.805774][ T3481] EXT4-fs (loop2): 1 truncate cleaned up [ 140.825260][ T3479] netlink: 'syz.2.867': attribute type 27 has an invalid length. [ 140.831617][ T3486] loop3: detected capacity change from 0 to 512 [ 140.844000][ T3486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.859569][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.866511][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.877252][ T3486] EXT4-fs (loop3): 1 truncate cleaned up [ 140.932947][ T3475] netlink: 'syz.4.866': attribute type 27 has an invalid length. [ 141.464067][ T3499] loop0: detected capacity change from 0 to 128 [ 141.580649][ T3499] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 141.639815][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.649065][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.704539][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.711796][ T3504] loop3: detected capacity change from 0 to 2048 [ 141.722998][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.744116][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.750990][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.761568][ T3504] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.776357][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.797584][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.805494][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.812267][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.846692][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.853326][ T3489] loop2: detected capacity change from 0 to 40427 [ 141.860968][ T3508] loop4: detected capacity change from 0 to 1024 [ 141.867862][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.870780][ T3489] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 141.877780][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.883077][ T3489] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 141.891048][ T3508] EXT4-fs: Ignoring removed orlov option [ 141.903950][ T3489] F2FS-fs (loop2): fault_injection options not supported [ 141.904345][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.919047][ T3508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.919676][ T3489] F2FS-fs (loop2): invalid crc value [ 141.933766][ T3448] device veth0_vlan entered promiscuous mode [ 141.941528][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.950866][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.961163][ T3514] loop3: detected capacity change from 0 to 256 [ 141.963457][ T3489] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.974250][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.021318][ T3489] F2FS-fs (loop2): Start checkpoint disabled! [ 142.024035][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.048442][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.049789][ T3518] loop3: detected capacity change from 0 to 256 [ 142.061254][ T3448] device veth1_macvtap entered promiscuous mode [ 142.062121][ T3489] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.077120][ T3489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 142.089976][ T3518] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 142.102664][ T3519] netlink: 'syz.0.879': attribute type 27 has an invalid length. [ 142.113036][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.125261][ T3519] loop0: detected capacity change from 0 to 512 [ 142.149109][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.157764][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.165800][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.177814][ T3519] EXT4-fs: Ignoring removed bh option [ 142.185862][ T28] audit: type=1400 audit(2000000034.060:317): avc: denied { execute } for pid=3515 comm="syz.3.878" path="/168/bus/blkio.bfq.io_serviced_recursive" dev="loop3" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.194969][ T2382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.221213][ T3519] EXT4-fs (loop0): orphan cleanup on readonly fs [ 142.223632][ T3523] loop2: detected capacity change from 0 to 512 [ 142.233506][ T3519] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 142.242179][ T3519] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.879: invalid indirect mapped block 8 (level 2) [ 142.262329][ T3527] loop3: detected capacity change from 0 to 128 [ 142.264023][ T3523] EXT4-fs: Ignoring removed bh option [ 142.275757][ T3519] EXT4-fs (loop0): Remounting filesystem read-only [ 142.283759][ T3527] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 142.297508][ T3519] EXT4-fs (loop0): 1 truncate cleaned up [ 142.328534][ T3522] netlink: 'syz.2.880': attribute type 27 has an invalid length. [ 142.336816][ T3523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 142.387212][ T3523] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 142.399374][ T3536] loop3: detected capacity change from 0 to 512 [ 142.406524][ T3536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.435669][ T3523] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.880: invalid indirect mapped block 8 (level 2) [ 142.457575][ T3523] EXT4-fs (loop2): Remounting filesystem read-only [ 142.474183][ T3523] EXT4-fs (loop2): 1 truncate cleaned up [ 142.499421][ T3522] netlink: 'syz.2.880': attribute type 27 has an invalid length. [ 142.864413][ T3536] EXT4-fs (loop3): 1 truncate cleaned up [ 143.390890][ T3556] netlink: 'syz.1.887': attribute type 27 has an invalid length. [ 143.423145][ T3560] loop0: detected capacity change from 0 to 512 [ 143.433752][ T3558] loop3: detected capacity change from 0 to 1024 [ 143.444640][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.451676][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.465247][ T3560] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 143.497450][ T3560] EXT4-fs (loop0): 1 truncate cleaned up [ 143.517640][ T3563] loop1: detected capacity change from 0 to 512 [ 143.523872][ T3563] EXT4-fs: Ignoring removed bh option [ 143.548076][ T3558] overlayfs: conflicting lowerdir path [ 143.555531][ T3558] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.888: Abort forced by user [ 143.566933][ T3558] EXT4-fs (loop3): Remounting filesystem read-only [ 143.576718][ T3558] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 143.587972][ T3563] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.596648][ T3560] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 143.599473][ T3558] overlayfs: upper fs is r/o, try multi-lower layers mount [ 143.617443][ T3563] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 143.628710][ T3563] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.887: invalid indirect mapped block 8 (level 2) [ 143.656519][ T3572] netlink: 'syz.0.891': attribute type 27 has an invalid length. [ 143.665628][ T3563] EXT4-fs (loop1): Remounting filesystem read-only [ 143.678631][ T3563] EXT4-fs (loop1): 1 truncate cleaned up [ 143.684042][ T3574] loop3: detected capacity change from 0 to 1024 [ 143.708407][ T3553] loop2: detected capacity change from 0 to 40427 [ 143.711233][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.715301][ T3574] EXT4-fs: Ignoring removed orlov option [ 143.730691][ T3574] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.742632][ T3553] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.778941][ T28] audit: type=1400 audit(2000000035.660:318): avc: denied { watch watch_reads } for pid=3579 comm="syz.0.893" path="/185" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.813533][ T3556] device veth0_vlan left promiscuous mode [ 143.826598][ T3556] device veth0_vlan entered promiscuous mode [ 143.835479][ T3556] device veth1_macvtap left promiscuous mode [ 143.841358][ T3553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.848016][ T3556] device veth1_macvtap entered promiscuous mode [ 143.858629][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.084513][ T1282] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.094916][ T3269] syz-executor: attempt to access beyond end of device [ 144.094916][ T3269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.095268][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.116336][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.124426][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.131287][ T2227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.138663][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.146842][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.154941][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.161798][ T2227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.169134][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.177306][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 144.185242][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.193174][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 144.201065][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.208959][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.216727][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.224692][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.232506][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.240485][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.240769][ T3589] loop2: detected capacity change from 0 to 512 [ 144.248661][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.262468][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.270500][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.278546][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.286322][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.287206][ T3589] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 144.294229][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.311250][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.319235][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.319664][ T28] audit: type=1400 audit(2000000036.200:319): avc: denied { rename } for pid=3587 comm="syz.2.895" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 144.327415][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.357485][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.365165][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.372881][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.380164][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.387328][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.395291][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.403473][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.411554][ T2227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.427125][ T3593] loop1: detected capacity change from 0 to 1024 [ 144.444187][ T28] audit: type=1400 audit(2000000036.320:320): avc: denied { mounton } for pid=3592 comm="syz.1.894" path="/2/file1/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.485762][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.496717][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.507537][ T1282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.507697][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.529703][ T1282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.557650][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.558821][ T1282] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.568743][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.577009][ T1282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.587830][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.596113][ T1282] usb 5-1: config 0 descriptor?? [ 144.610888][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.622014][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.641418][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.643963][ T3600] loop3: detected capacity change from 0 to 512 [ 144.652089][ T3448] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 144.728963][ T3600] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038 (0x7fffffff) [ 145.294633][ T3613] loop2: detected capacity change from 0 to 256 [ 145.297176][ T1282] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 145.312904][ T1282] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 145.324946][ T3613] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 145.337596][ T3613] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 145.384526][ T3615] netlink: 'syz.2.903': attribute type 27 has an invalid length. [ 145.398714][ T3615] loop2: detected capacity change from 0 to 512 [ 145.412013][ T3615] EXT4-fs: Ignoring removed bh option [ 145.418909][ T3615] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.425254][ T3615] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 145.435538][ T3615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.903: invalid indirect mapped block 8 (level 2) [ 145.448782][ T3615] EXT4-fs (loop2): Remounting filesystem read-only [ 145.455266][ T3615] EXT4-fs (loop2): 1 truncate cleaned up [ 145.465877][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.472970][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.480561][ T3616] device bridge_slave_0 entered promiscuous mode [ 145.487476][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.494389][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.501705][ T3616] device bridge_slave_1 entered promiscuous mode [ 145.524386][ T3622] loop3: detected capacity change from 0 to 256 [ 145.558027][ T3622] exfat: Deprecated parameter 'utf8' [ 145.567492][ T3622] exfat: Deprecated parameter 'namecase' [ 145.581809][ T3625] loop0: detected capacity change from 0 to 512 [ 145.598865][ T3627] xt_hashlimit: size too large, truncated to 1048576 [ 145.600494][ T3622] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 145.617596][ T332] device bridge_slave_1 left promiscuous mode [ 145.623544][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.630854][ T3625] ext4: Bad value for 'max_batch_time' [ 145.643350][ T332] device bridge_slave_0 left promiscuous mode [ 145.703346][ T28] audit: type=1400 audit(2000000037.560:321): avc: denied { write } for pid=3621 comm="syz.3.904" name="memory.events" dev="loop3" ino=1048700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.728201][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.736163][ T332] device veth1_macvtap left promiscuous mode [ 145.742067][ T332] device veth0_vlan left promiscuous mode [ 145.781613][ T3629] loop0: detected capacity change from 0 to 16 [ 145.790816][ T3629] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.799552][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 145.855826][ T3634] loop2: detected capacity change from 0 to 1024 [ 145.862583][ T3634] EXT4-fs: Ignoring removed nobh option [ 145.868687][ T3634] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.909668][ T3638] loop2: detected capacity change from 0 to 512 [ 145.932726][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.940627][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.950372][ T3638] EXT4-fs (loop2): 1 orphan inode deleted [ 145.955754][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.956096][ T3638] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 145.964522][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.974006][ T3437] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.981770][ T2697] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.991427][ T3437] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:8: Failed to release dquot type 1 [ 145.997939][ T2697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.016496][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.024729][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.032799][ T2697] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.039650][ T2697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.047196][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.055068][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.069922][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.078971][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.086476][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.095888][ T2697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.106660][ T3616] device veth0_vlan entered promiscuous mode [ 146.114784][ T3642] loop2: detected capacity change from 0 to 512 [ 146.121057][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.128865][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.136551][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.151405][ T3616] device veth1_macvtap entered promiscuous mode [ 146.159028][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.910: corrupted inode contents [ 146.171869][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.176801][ T3642] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.910: mark_inode_dirty error [ 146.180122][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.191571][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.910: corrupted inode contents [ 146.198646][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.210424][ T3642] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.910: mark_inode_dirty error [ 146.218919][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.229240][ T3642] Quota error (device loop2): write_blk: dquota write failed [ 146.236620][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.244357][ T1282] usb 5-1: USB disconnect, device number 10 [ 146.265460][ T3642] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 146.289495][ T3642] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.910: Failed to acquire dquot type 0 [ 146.298106][ T3648] netlink: 'syz.1.911': attribute type 27 has an invalid length. [ 146.301030][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.910: corrupted inode contents [ 146.323397][ T3642] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.910: mark_inode_dirty error [ 146.337951][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.910: corrupted inode contents [ 146.351088][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.358084][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.358356][ T3649] loop1: detected capacity change from 0 to 512 [ 146.365162][ T3642] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.910: mark_inode_dirty error [ 146.371520][ T3649] EXT4-fs: Ignoring removed bh option [ 146.387903][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.910: corrupted inode contents [ 146.401132][ T3649] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.407964][ T3649] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 146.408336][ T3642] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 146.425932][ T3642] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.910: corrupted inode contents [ 146.441528][ T3642] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.910: mark_inode_dirty error [ 146.453097][ T3649] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.911: invalid indirect mapped block 8 (level 2) [ 146.453781][ T3642] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 146.481504][ T3649] EXT4-fs (loop1): Remounting filesystem read-only [ 146.496941][ T3649] EXT4-fs (loop1): 1 truncate cleaned up [ 146.503987][ T3642] EXT4-fs (loop2): 1 truncate cleaned up [ 146.511759][ T3642] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 146.655223][ T3655] device pim6reg1 entered promiscuous mode [ 146.906529][ T3659] loop3: detected capacity change from 0 to 512 [ 147.005297][ T3661] netlink: 'syz.1.914': attribute type 27 has an invalid length. [ 147.023262][ T3659] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038 (0x7fffffff) [ 147.035155][ T3663] loop4: detected capacity change from 0 to 1024 [ 147.057694][ T3661] loop1: detected capacity change from 0 to 512 [ 147.077803][ T3663] EXT4-fs: Ignoring removed orlov option [ 147.093689][ T3661] EXT4-fs: Ignoring removed bh option [ 147.099352][ T3663] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.138324][ T3661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.146355][ T3661] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 148.807811][ T3683] loop0: detected capacity change from 0 to 512 [ 148.814188][ T3683] EXT4-fs: Ignoring removed orlov option [ 148.829398][ T3683] ext4 filesystem being mounted at /190/bus supports timestamps until 2038 (0x7fffffff) [ 148.841975][ T3661] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.914: invalid indirect mapped block 8 (level 2) [ 148.887581][ T3661] EXT4-fs (loop1): Remounting filesystem read-only [ 148.894025][ T3661] EXT4-fs (loop1): 1 truncate cleaned up [ 149.033790][ T3696] loop4: detected capacity change from 0 to 512 [ 149.040511][ T3696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.051939][ T3696] EXT4-fs (loop4): 1 truncate cleaned up [ 149.222093][ T3699] device pim6reg1 entered promiscuous mode [ 149.232130][ T313] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.315563][ T2229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.637481][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.648531][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.658153][ T313] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 149.667049][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.675614][ T313] usb 2-1: config 0 descriptor?? [ 149.677457][ T2229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.847689][ T2229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.856597][ T2229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.864514][ T2229] usb 1-1: Product: syz [ 149.868588][ T2229] usb 1-1: Manufacturer: syz [ 149.872967][ T2229] usb 1-1: SerialNumber: syz [ 149.950337][ T3704] netlink: 'syz.4.924': attribute type 27 has an invalid length. [ 149.962945][ T3704] loop4: detected capacity change from 0 to 512 [ 149.969627][ T3704] EXT4-fs: Ignoring removed bh option [ 149.978538][ T3704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.984746][ T3704] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.993132][ T3704] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.924: invalid indirect mapped block 8 (level 2) [ 150.006138][ T2231] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.013726][ T3704] EXT4-fs (loop4): Remounting filesystem read-only [ 150.020191][ T3704] EXT4-fs (loop4): 1 truncate cleaned up [ 150.037881][ T28] audit: type=1400 audit(2000000041.920:322): avc: denied { bind } for pid=3706 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 150.066777][ T3709] loop4: detected capacity change from 0 to 512 [ 150.079068][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz.4.926: corrupted inode contents [ 150.091212][ T3709] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.926: mark_inode_dirty error [ 150.103250][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz.4.926: corrupted inode contents [ 150.115050][ T3709] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.926: mark_inode_dirty error [ 150.127093][ T3709] Quota error (device loop4): write_blk: dquota write failed [ 150.134456][ T3709] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 150.144292][ T3709] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.926: Failed to acquire dquot type 0 [ 150.148436][ T313] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 150.162336][ T313] chicony 0003:04F2:1236.0027: unbalanced collection at end of report description [ 150.162622][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.926: corrupted inode contents [ 150.171586][ T313] chicony 0003:04F2:1236.0027: Chicony hid parse failed: -22 [ 150.183298][ T3709] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.926: mark_inode_dirty error [ 150.190286][ T313] chicony: probe of 0003:04F2:1236.0027 failed with error -22 [ 150.201522][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.926: corrupted inode contents [ 150.222028][ T3709] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.926: mark_inode_dirty error [ 150.236747][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.926: corrupted inode contents [ 150.248655][ T3709] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 150.257113][ T3709] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz.4.926: corrupted inode contents [ 150.268986][ T3709] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz.4.926: mark_inode_dirty error [ 150.280073][ T3709] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 150.289210][ T3709] EXT4-fs (loop4): 1 truncate cleaned up [ 150.294720][ T3709] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038 (0x7fffffff) [ 150.367487][ T2231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.390861][ T2231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.449692][ T313] usb 2-1: USB disconnect, device number 14 [ 150.596820][ T2231] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.605715][ T2231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.614050][ T2231] usb 4-1: config 0 descriptor?? [ 150.966571][ T3716] loop4: detected capacity change from 0 to 16 [ 150.973033][ T3716] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 151.007488][ T2229] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 151.013758][ T2229] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 151.032062][ T2229] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 151.082485][ T3720] loop4: detected capacity change from 0 to 512 [ 151.098213][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.105632][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.113360][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.121226][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.121451][ T3720] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038 (0x7fffffff) [ 151.128680][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.550860][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.558344][ T2229] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 151.564822][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.577961][ T2229] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 151.588829][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.603545][ T2229] usb 1-1: USB disconnect, device number 12 [ 151.603674][ T28] audit: type=1400 audit(2000000043.480:323): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 151.614007][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.637749][ T2229] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 151.880186][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.887560][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.894742][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.904526][ T3735] netlink: 'syz.1.930': attribute type 27 has an invalid length. [ 151.908032][ T3737] loop2: detected capacity change from 0 to 512 [ 151.914338][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.919850][ T28] audit: type=1400 audit(2000000043.800:324): avc: denied { getattr } for pid=3732 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.926604][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.958758][ T3735] loop1: detected capacity change from 0 to 512 [ 151.964014][ T3737] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 151.983104][ T2231] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 151.990583][ T3735] EXT4-fs: Ignoring removed bh option [ 151.997617][ T28] audit: type=1400 audit(2000000043.840:325): avc: denied { mounton } for pid=3734 comm="syz.2.931" path="/23/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.023385][ T3735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.029736][ T28] audit: type=1400 audit(2000000043.920:326): avc: denied { read } for pid=3741 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.030506][ T2231] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 152.051793][ T3735] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 152.059971][ T2227] ================================================================== [ 152.074497][ T2227] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 152.082139][ T2227] Read of size 8 at addr ffff888112122cf0 by task kworker/0:10/2227 [ 152.089943][ T2227] [ 152.092115][ T2227] CPU: 0 PID: 2227 Comm: kworker/0:10 Not tainted 6.1.99-syzkaller-00014-g4d8187d2c8fa #0 [ 152.101838][ T2227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.111730][ T2227] Workqueue: events linkwatch_event [ 152.116769][ T2227] Call Trace: [ 152.119887][ T2227] [ 152.122665][ T2227] dump_stack_lvl+0x151/0x1b7 [ 152.127179][ T2227] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 152.132471][ T2227] ? _printk+0xd1/0x111 [ 152.136464][ T2227] ? __virt_addr_valid+0x242/0x2f0 [ 152.141415][ T2227] print_report+0x158/0x4e0 [ 152.145749][ T2227] ? __virt_addr_valid+0x242/0x2f0 [ 152.150785][ T2227] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 152.156860][ T2227] ? __list_del_entry_valid+0xa6/0x130 [ 152.162154][ T2227] kasan_report+0x13c/0x170 [ 152.166494][ T2227] ? __list_del_entry_valid+0xa6/0x130 [ 152.171789][ T2227] ? kfree_rcu_monitor+0x796/0x800 [ 152.176821][ T2227] __asan_report_load8_noabort+0x14/0x20 [ 152.182290][ T2227] __list_del_entry_valid+0xa6/0x130 [ 152.187410][ T2227] process_one_work+0x4d7/0xcb0 [ 152.192098][ T2227] worker_thread+0xa60/0x1260 [ 152.196614][ T2227] kthread+0x26d/0x300 [ 152.200514][ T2227] ? worker_clr_flags+0x1a0/0x1a0 [ 152.205376][ T2227] ? kthread_blkcg+0xd0/0xd0 [ 152.209803][ T2227] ret_from_fork+0x1f/0x30 [ 152.214066][ T2227] [ 152.216921][ T2227] [ 152.219090][ T2227] Allocated by task 2229: [ 152.223259][ T2227] kasan_set_track+0x4b/0x70 [ 152.227682][ T2227] kasan_save_alloc_info+0x1f/0x30 [ 152.232628][ T2227] __kasan_kmalloc+0x9c/0xb0 [ 152.237054][ T2227] __kmalloc_node+0xb4/0x1e0 [ 152.241481][ T2227] kvmalloc_node+0x221/0x640 [ 152.245907][ T2227] alloc_netdev_mqs+0x8c/0xf90 [ 152.250506][ T2227] alloc_etherdev_mqs+0x36/0x40 [ 152.255193][ T2227] usbnet_probe+0x207/0x27c0 [ 152.259620][ T2227] usb_probe_interface+0x5b6/0xa90 [ 152.264568][ T2227] really_probe+0x2b8/0x920 [ 152.268906][ T2227] __driver_probe_device+0x1a0/0x310 [ 152.274028][ T2227] driver_probe_device+0x54/0x3d0 [ 152.278887][ T2227] __device_attach_driver+0x2e3/0x490 [ 152.284443][ T2227] bus_for_each_drv+0x183/0x200 [ 152.289130][ T2227] __device_attach+0x312/0x510 [ 152.293731][ T2227] device_initial_probe+0x1a/0x20 [ 152.298590][ T2227] bus_probe_device+0xbe/0x1e0 [ 152.303190][ T2227] device_add+0xb60/0xf10 [ 152.307357][ T2227] usb_set_configuration+0x190f/0x1e80 [ 152.312657][ T2227] usb_generic_driver_probe+0x8b/0x150 [ 152.317945][ T2227] usb_probe_device+0x144/0x260 [ 152.322631][ T2227] really_probe+0x2b8/0x920 [ 152.326970][ T2227] __driver_probe_device+0x1a0/0x310 [ 152.332097][ T2227] driver_probe_device+0x54/0x3d0 [ 152.336951][ T2227] __device_attach_driver+0x2e3/0x490 [ 152.342158][ T2227] bus_for_each_drv+0x183/0x200 [ 152.346844][ T2227] __device_attach+0x312/0x510 [ 152.351449][ T2227] device_initial_probe+0x1a/0x20 [ 152.356305][ T2227] bus_probe_device+0xbe/0x1e0 [ 152.360906][ T2227] device_add+0xb60/0xf10 [ 152.365072][ T2227] usb_new_device+0xf2f/0x1820 [ 152.369672][ T2227] hub_event+0x2db1/0x4830 [ 152.373940][ T2227] process_one_work+0x73d/0xcb0 [ 152.378612][ T2227] worker_thread+0xa60/0x1260 [ 152.383125][ T2227] kthread+0x26d/0x300 [ 152.387029][ T2227] ret_from_fork+0x1f/0x30 [ 152.391287][ T2227] [ 152.393453][ T2227] Freed by task 2229: [ 152.397395][ T2227] kasan_set_track+0x4b/0x70 [ 152.401819][ T2227] kasan_save_free_info+0x2b/0x40 [ 152.406678][ T2227] ____kasan_slab_free+0x131/0x180 [ 152.411622][ T2227] __kasan_slab_free+0x11/0x20 [ 152.416220][ T2227] __kmem_cache_free+0x218/0x3b0 [ 152.420996][ T2227] kfree+0x7a/0xf0 [ 152.424556][ T2227] kvfree+0x35/0x40 [ 152.428199][ T2227] netdev_freemem+0x3f/0x60 [ 152.432538][ T2227] netdev_release+0x7f/0xb0 [ 152.436877][ T2227] device_release+0x95/0x1c0 [ 152.441317][ T2227] kobject_put+0x178/0x260 [ 152.445559][ T2227] put_device+0x1f/0x30 [ 152.449550][ T2227] free_netdev+0x393/0x480 [ 152.453802][ T2227] usbnet_disconnect+0x245/0x390 [ 152.458586][ T2227] usb_unbind_interface+0x1fa/0x8c0 [ 152.463614][ T2227] device_release_driver_internal+0x53e/0x870 [ 152.469513][ T2227] device_release_driver+0x19/0x20 [ 152.474458][ T2227] bus_remove_device+0x2fa/0x360 [ 152.479238][ T2227] device_del+0x663/0xe90 [ 152.483398][ T2227] usb_disable_device+0x380/0x720 [ 152.488260][ T2227] usb_disconnect+0x32a/0x890 [ 152.492772][ T2227] hub_event+0x1ed8/0x4830 [ 152.497024][ T2227] process_one_work+0x73d/0xcb0 [ 152.501713][ T2227] worker_thread+0xd71/0x1260 [ 152.506223][ T2227] kthread+0x26d/0x300 [ 152.510129][ T2227] ret_from_fork+0x1f/0x30 [ 152.514384][ T2227] [ 152.516553][ T2227] Last potentially related work creation: [ 152.522108][ T2227] kasan_save_stack+0x3b/0x60 [ 152.526621][ T2227] __kasan_record_aux_stack+0xb4/0xc0 [ 152.531827][ T2227] kasan_record_aux_stack_noalloc+0xb/0x10 [ 152.537474][ T2227] insert_work+0x56/0x310 [ 152.541639][ T2227] __queue_work+0x9b6/0xd70 [ 152.545979][ T2227] queue_work_on+0x105/0x170 [ 152.550402][ T2227] usbnet_link_change+0xeb/0x100 [ 152.555177][ T2227] usbnet_probe+0x1dbe/0x27c0 [ 152.559688][ T2227] usb_probe_interface+0x5b6/0xa90 [ 152.564637][ T2227] really_probe+0x2b8/0x920 [ 152.568976][ T2227] __driver_probe_device+0x1a0/0x310 [ 152.574095][ T2227] driver_probe_device+0x54/0x3d0 [ 152.578958][ T2227] __device_attach_driver+0x2e3/0x490 [ 152.584165][ T2227] bus_for_each_drv+0x183/0x200 [ 152.588858][ T2227] __device_attach+0x312/0x510 [ 152.593451][ T2227] device_initial_probe+0x1a/0x20 [ 152.598314][ T2227] bus_probe_device+0xbe/0x1e0 [ 152.602912][ T2227] device_add+0xb60/0xf10 [ 152.607078][ T2227] usb_set_configuration+0x190f/0x1e80 [ 152.612370][ T2227] usb_generic_driver_probe+0x8b/0x150 [ 152.617666][ T2227] usb_probe_device+0x144/0x260 [ 152.622351][ T2227] really_probe+0x2b8/0x920 [ 152.626692][ T2227] __driver_probe_device+0x1a0/0x310 [ 152.631818][ T2227] driver_probe_device+0x54/0x3d0 [ 152.636671][ T2227] __device_attach_driver+0x2e3/0x490 [ 152.641880][ T2227] bus_for_each_drv+0x183/0x200 [ 152.646566][ T2227] __device_attach+0x312/0x510 [ 152.651341][ T2227] device_initial_probe+0x1a/0x20 [ 152.656200][ T2227] bus_probe_device+0xbe/0x1e0 [ 152.660801][ T2227] device_add+0xb60/0xf10 [ 152.664966][ T2227] usb_new_device+0xf2f/0x1820 [ 152.669567][ T2227] hub_event+0x2db1/0x4830 [ 152.673818][ T2227] process_one_work+0x73d/0xcb0 [ 152.678506][ T2227] worker_thread+0xa60/0x1260 [ 152.683026][ T2227] kthread+0x26d/0x300 [ 152.686925][ T2227] ret_from_fork+0x1f/0x30 [ 152.691359][ T2227] [ 152.693527][ T2227] The buggy address belongs to the object at ffff888112122000 [ 152.693527][ T2227] which belongs to the cache kmalloc-4k of size 4096 [ 152.707419][ T2227] The buggy address is located 3312 bytes inside of [ 152.707419][ T2227] 4096-byte region [ffff888112122000, ffff888112123000) [ 152.720702][ T2227] [ 152.722896][ T2227] The buggy address belongs to the physical page: [ 152.729131][ T2227] page:ffffea0004484800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112120 [ 152.739187][ T2227] head:ffffea0004484800 order:3 compound_mapcount:0 compound_pincount:0 [ 152.747341][ T2227] flags: 0x4000000000010200(slab|head|zone=1) [ 152.753254][ T2227] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 152.761668][ T2227] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 152.770081][ T2227] page dumped because: kasan: bad access detected [ 152.776342][ T2227] page_owner tracks the page as allocated [ 152.781884][ T2227] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2229, tgid 2229 (kworker/0:12), ts 149917813781, free_ts 149052970385 [ 152.806445][ T2227] post_alloc_hook+0x213/0x220 [ 152.811044][ T2227] prep_new_page+0x1b/0x110 [ 152.815385][ T2227] get_page_from_freelist+0x27ea/0x2870 [ 152.820764][ T2227] __alloc_pages+0x3a1/0x780 [ 152.825191][ T2227] alloc_slab_page+0x6c/0xf0 [ 152.829707][ T2227] new_slab+0x90/0x3e0 [ 152.833609][ T2227] ___slab_alloc+0x6f9/0xb80 [ 152.838035][ T2227] __slab_alloc+0x5d/0xa0 [ 152.842201][ T2227] __kmem_cache_alloc_node+0x1af/0x250 [ 152.847498][ T2227] __kmalloc_node+0xa3/0x1e0 [ 152.851922][ T2227] kvmalloc_node+0x221/0x640 [ 152.856348][ T2227] alloc_netdev_mqs+0x8c/0xf90 [ 152.860958][ T2227] alloc_etherdev_mqs+0x36/0x40 [ 152.865637][ T2227] usbnet_probe+0x207/0x27c0 [ 152.870062][ T2227] usb_probe_interface+0x5b6/0xa90 [ 152.875011][ T2227] really_probe+0x2b8/0x920 [ 152.879350][ T2227] page last free stack trace: [ 152.883863][ T2227] free_unref_page_prepare+0x83d/0x850 [ 152.889157][ T2227] free_unref_page+0xb2/0x5c0 [ 152.893672][ T2227] __free_pages+0x61/0xf0 [ 152.897836][ T2227] __free_slab+0xce/0x1a0 [ 152.902003][ T2227] discard_slab+0x29/0x40 [ 152.906167][ T2227] __slab_free+0x205/0x280 [ 152.910422][ T2227] ___cache_free+0xc6/0xd0 [ 152.914672][ T2227] qlist_free_all+0xc5/0x140 [ 152.919099][ T2227] kasan_quarantine_reduce+0x15a/0x180 [ 152.924393][ T2227] __kasan_slab_alloc+0x24/0x80 [ 152.929080][ T2227] slab_post_alloc_hook+0x53/0x2c0 [ 152.934029][ T2227] kmem_cache_alloc_node+0x18a/0x2d0 [ 152.939148][ T2227] __alloc_skb+0xcc/0x2d0 [ 152.943313][ T2227] netlink_sendmsg+0x7a6/0xd30 [ 152.947914][ T2227] ____sys_sendmsg+0x5d3/0x9a0 [ 152.952513][ T2227] __sys_sendmsg+0x2a9/0x390 [ 152.956942][ T2227] [ 152.959109][ T2227] Memory state around the buggy address: [ 152.964581][ T2227] ffff888112122b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.972482][ T2227] ffff888112122c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.980378][ T2227] >ffff888112122c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 152.988274][ T2227] ^ [ 152.995825][ T2227] ffff888112122d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.003724][ T2227] ffff888112122d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.011620][ T2227] ================================================================== [ 153.019517][ T2227] Disabling lock debugging due to kernel taint [ 153.027591][ T3735] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.930: invalid indirect mapped block 8 (level 2) [ 153.040623][ T28] audit: type=1400 audit(2000000044.920:327): avc: denied { open } for pid=3741 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=309 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.065412][ T2231] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 153.078288][ T3735] EXT4-fs (loop1): Remounting filesystem read-only [ 153.081010][ T2231] usb 4-1: USB disconnect, device number 11 [ 153.093506][ T28] audit: type=1400 audit(2000000044.950:328): avc: denied { create } for pid=3729 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.101415][ T3735] EXT4-fs (loop1): 1 truncate cleaned up [ 153.116161][ T28] audit: type=1400 audit(2000000044.950:329): avc: denied { write } for pid=3729 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=10911 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.122919][ T3735] EXT4-fs mount: 110 callbacks suppressed [ 153.122933][ T3735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.175662][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 153.189546][ T3616] EXT4-fs (loop1): unmounting filesystem.